$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) [ 193.127453] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 193.218927] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 193.287589] 9pnet: p9_fd_create_tcp (12612): problem connecting socket to 127.0.0.1 [ 193.313558] 9pnet: p9_fd_create_tcp (12621): problem connecting socket to 127.0.0.1 22:24:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 193.339776] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @mcast1, 0x2}, 0xffffffffffffff93) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:53 executing program 3: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x80, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4b, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000240)={{}, 'port1\x00', 0x0, 0x400, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000a8b000/0x3000)=nil, 0x3000}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r2, &(0x7f0000016ff8)='./file0\x00', 0x0) r3 = openat(r2, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) renameat2(r2, &(0x7f0000bee000)='./control\x00', r3, &(0x7f000003a000)='./control\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) munlockall() openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) 22:24:53 executing program 2: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x80, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4b, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000240)={{}, 'port1\x00', 0x0, 0x400, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000a8b000/0x3000)=nil, 0x3000}}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r2, &(0x7f0000016ff8)='./file0\x00', 0x0) r3 = openat(r2, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x200) renameat2(r2, &(0x7f0000bee000)='./control\x00', r3, &(0x7f000003a000)='./control\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) munlockall() openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r4) 22:24:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086604, &(0x7f0000000040)) pwrite64(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) 22:24:53 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r7 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000002940)) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 193.517997] FAT-fs (loop4): bogus number of reserved sectors [ 193.530007] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:53 executing program 0: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000340)='./file1\x00', 0x4, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r3, &(0x7f000001fff8)='./file0\x00') utimensat(r0, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', &(0x7f0000000140)={{}, {0x0, 0x7530}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r1, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000380)={{0x77359400}, {r4, r5/1000+30000}}, 0xfe) 22:24:53 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x81) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @remote}, 0x1c) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCCBRK(r1, 0x5428) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:53 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:53 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$TIOCCONS(r1, 0x541d) setfsgid(r0) 22:24:53 executing program 2: remap_file_pages(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffe, 0x40000) r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@ethernet={0x0, @link_local}, &(0x7f0000000100)=0x80) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) getpeername$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000240)) readahead(r0, 0x7fffffff0000, 0xffffffffffffffa2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r2 = memfd_create(&(0x7f0000000280)='\x00', 0x1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f00000002c0)={0x800, 0xb44a, 0x1}) 22:24:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) creat(&(0x7f0000002900)='./file0\x00', 0x130) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:53 executing program 1: msync(&(0x7f0000d5c000/0x2000)=nil, 0xfffffffffffffef1, 0x0) remap_file_pages(&(0x7f0000d5c000/0x2000)=nil, 0x2000, 0x2000000, 0x5db, 0x2000) 22:24:54 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) r1 = epoll_create1(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) r3 = getpgrp(r2) r4 = syz_open_procfs(r3, &(0x7f0000000400)='net/ip_mr_cache\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) openat$cgroup_ro(r4, &(0x7f0000000480)='cpuacct.usage_all\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xc1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8002, 0x0) r5 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x40) listen(0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0xda, @loopback, 0x8}}}, 0x3a) ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f0000000540)={0x86, 0x5}) unshare(0x2000400) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000600)='/dev/nbd#\x00', 0xffffffffffffffff, 0x10000) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @rand_addr=0xc63}}) sendto$inet6(0xffffffffffffffff, &(0x7f00004e8000), 0xcd, 0x20000004, &(0x7f0000b63fe4), 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/133, &(0x7f0000000280)=0x85) 22:24:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100, 0x82900) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:54 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) creat(&(0x7f000002bff8)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x0, r2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) acct(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_to_bond\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast1}, 0x4e23, 0x6, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x33, r7, r4}, {0x7, 0x9, 0x9b6, 0x10000, 0x7, 0x100000000, 0x100000001, 0x2}, {0x9, 0x7, 0x400}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x1, 0x6031bdc3, 0x1ff, 0xa73, 0x3}}, 0xe8) ioctl$RTC_AIE_OFF(r3, 0x7002) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 22:24:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus/file0\x00', 0x80200, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x5, 0x5, 0x9e6, 0x8, 0x7}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @rand_addr=0x1f}}) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) 22:24:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x101) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfffffffffffffdac) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8) 22:24:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 194.046051] FAT-fs (loop4): bogus number of reserved sectors [ 194.071047] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:54 executing program 1: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) r1 = epoll_create1(0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) r3 = getpgrp(r2) r4 = syz_open_procfs(r3, &(0x7f0000000400)='net/ip_mr_cache\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) openat$cgroup_ro(r4, &(0x7f0000000480)='cpuacct.usage_all\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xc1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x8002, 0x0) r5 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x40) listen(0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0xda, @loopback, 0x8}}}, 0x3a) ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f0000000540)={0x86, 0x5}) unshare(0x2000400) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000600)='/dev/nbd#\x00', 0xffffffffffffffff, 0x10000) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e24, @rand_addr=0xc63}}) sendto$inet6(0xffffffffffffffff, &(0x7f00004e8000), 0xcd, 0x20000004, &(0x7f0000b63fe4), 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)=""/133, &(0x7f0000000280)=0x85) 22:24:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x8001}}, {@rq={'rq', 0x3d, 0xfffffffffffff8d2}}, {@sq={'sq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0xd11f}}, {@common=@cache_fscache='cache=fscache'}, {@rq={'rq'}}, {@timeout={'timeout', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x3}}]}}) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) creat(&(0x7f0000002900)='./file0\x00', 0x130) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 194.174235] Process accounting resumed 22:24:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x10043fffc, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000001c0)={0x3, 0x2, {0x57, 0x4, 0xbed5, {0x3, 0x6b}, {0x9, 0x1}, @const={0x80, {0x101, 0x5, 0x1, 0x200}}}, {0x57, 0xffffffffffffff8f, 0x100, {0x4, 0x5fc}, {0xfff, 0x9}, @period={0x5b, 0x3, 0x1, 0x8, 0xffff, {0x5, 0x7d7c857b, 0x406985f0, 0x100000000}, 0x6, &(0x7f0000000180)=[0x0, 0x1, 0x7, 0x80, 0x1f, 0xe4]}}}) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca943264009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0xfffffffffffffe29}], 0x1) 22:24:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x210) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xf, 0x2, @thr={&(0x7f00000001c0)="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", &(0x7f0000000000)="864fe63d24953dafab01821a62df7263c8ebb4a4172697e426c6c38c8a3f9eb8e261ca01ef37f46f0faa6b33d2b2756f49dbfee4d4dcec52f5576c360e9377c08c6314c19d20f13c63f6cffdce6495acee0a045fcfc1a1683a4e346f21c01fcd4f9cd42adf30399f6ace32918c5cf65e4923634f1be3b525e1cb354a456e190cbae9db5bdaa5ae1232a607d4e12c7548ada06fa47eb88646520f16b77e232c0dcf72b545a2a13c5c"}}, &(0x7f0000000100)=0x0) timer_delete(r2) dup2(r0, r1) 22:24:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x2540, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/197, 0xc5, 0x40, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x8}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46f5ff1e3aac0a00000000000003000300fdffffff8b00000000000000400000000000000028010000000000000800000000803800020037020010ff07060000600400000000010000000000000008000000000000180900000000000006000000000000000300000000000000070000000000000066f8d3dc95d8c4b5e94e12ee99704c89fc9dd3922f16e0e1be1c610343008a1ad80d5200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x69b) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x40000) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x7ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) [ 194.212997] FAT-fs (loop4): bogus number of reserved sectors [ 194.225870] 9pnet: Could not find request transport: rdma 22:24:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x169001, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000001c0)=""/114) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000140)={0x0, 0x3ff, 0x1, 0xff, 0x2, 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:54 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000fd9ffb)='user\x00', &(0x7f00005c7000), &(0x7f0000c51000), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000240)="72787270635f7300cfeb7e2b57328ac847d604512ee876a001ad887b5f", &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x18a, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)='\x00') syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') [ 194.244680] 9pnet: Could not find request transport: rdma [ 194.247092] Process accounting resumed 22:24:54 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x3f, 0x0, 0x4c3}, {0x1, 0x480000, 0x40, 0x2}, {0x0, 0x1, 0x0, 0x1}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc) lseek(r1, 0x0, 0x2) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6596444cf377", @ANYRESHEX=r0, @ANYBLOB=',loose,version=9p2000,noextend,privport,\x00']) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xa8, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 22:24:54 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xd, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 22:24:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) creat(&(0x7f0000002900)='./file0\x00', 0x130) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:54 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000180)=ANY=[]) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@dev}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0x2e6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$TIOCCBRK(r0, 0x5428) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) fsync(r0) [ 194.278125] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 194.337253] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 194.449560] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus/file0\x00', 0x80200, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x5, 0x5, 0x9e6, 0x8, 0x7}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e23, @rand_addr=0x1f}}) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) 22:24:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0xffffffffffffff65) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x6) 22:24:54 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/ip_mr_vif\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) setrlimit(0x9, &(0x7f0000000140)={0x1, 0x401}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:54 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sync() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 22:24:54 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0xfffffffffffffd06, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x1) read(r1, &(0x7f0000000240)=""/108, 0x32) 22:24:55 executing program 5: readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/188, 0xbc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x301000, 0x111) r1 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)="2fd497f142fd4581917def48728d468fd19884a2ea6c9ae630078aa1f12ad029d156a6eb223a78c655593c9595f5549d33d035e5f87851e19d23c13784e44f5328939e1c6d039074fdfbcc3876437f0c11b6d84c5daee0d3623fb0668a0ae50a7ffead886820b5782513fa022119eda9a441755fd9ae07d1cc13cced9b931cdca447634260a14fb1ff1225cb06978987ffc8565b517f8902d6d51ba8f9c520", 0x9f}, {&(0x7f0000000400)="6c789a15790ed3841f524ad6bd5c8210468153ddc39665756cc5cee27fd8a64d0d6af1725bcc24436ff0b5005b3632a97964d2de781b1d09b36c2082533f1996c90e0ff2d5081ddda1fae5a3dbd756ccb5db565015b77ceff0d12e715f6b3c8cc27deae851d1af229740300dd00e2d605bf04d7a3de4ac2aa5d6ed6a7c1d2dec50a8d5f218aafe034e39540c9679a22eb6c3", 0x92}], 0x2, &(0x7f0000000640)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x24040001}, 0x40045) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x105000, 0x0) 22:24:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x48}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@ax25, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/36, 0x24}}], 0x40000000000004e, 0x0, &(0x7f0000003000)={r2, r3+10000000}) r4 = dup2(r1, r0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x2, 0xb000}, 0x4) [ 194.995923] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 195.024906] FAT-fs (loop4): bogus number of reserved sectors [ 195.037958] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x200000000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000140)=0x30) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400250028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a50b45ed0c7b430f333356b1c72e2e3120ad6ab557b93c8198421a3991e64b40a23e7d922267ec1172ef54dc1cabe06d898c5376b6", 0x8c}], 0x1) 22:24:55 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0xb9b8, 0x1, 0x2, 0x6, 0x95, 0x9, 0x9}, 0x20) socket$inet6(0xa, 0x3, 0x3c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 22:24:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0x400000000000, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x3f, 0x0, 0x4c3}, {0x1, 0x480000, 0x40, 0x2}, {0x0, 0x1, 0x0, 0x1}]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc) lseek(r1, 0x0, 0x2) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) sendfile(r1, r1, &(0x7f00000000c0), 0x7f8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x80000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6596444cf377", @ANYRESHEX=r0, @ANYBLOB=',loose,version=9p2000,noextend,privport,\x00']) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xa8, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x12}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 195.138534] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 195.180288] FAT-fs (loop4): bogus number of reserved sectors [ 195.191860] FAT-fs (loop4): Can't find a valid FAT filesystem [ 195.259588] FAT-fs (loop3): bogus number of reserved sectors [ 195.280450] FAT-fs (loop3): Can't find a valid FAT filesystem 22:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x8a8}, 0x1c) 22:24:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_getparam(r3, &(0x7f0000000180)) shutdown(r2, 0x1) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, r8) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) eventfd2(0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffd, @dev, 0x7}, 0x1c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r2, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getpid() getsockname$inet(r1, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffe49}, 0x18) syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x90040) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000240)) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) 22:24:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) getpeername$unix(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x0) [ 195.620365] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 195.645553] FAT-fs (loop4): bogus number of reserved sectors [ 195.659068] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x1, 0x1, 0x4894, 0x3, 0x2, 0x9ee}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="7797d6a31a4f", @multicast2, @local, @local}}, 0x26) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)="00000000009ea271d9ee6ae2c6ddaad21bbc5fd4c34a60dd353563f14a5e4cd81d4eeb9153bfebd7d8c92ef7da0d1b972567c08473808c55fc2a6d69e373a495790412d7bab7ca80205c62842c4a94f5155ae16dafdd2e1755aca15273f750630cff606429f63fd84f277e8ad019b2144a888e35b5931278de12e01be8327fe5be5a67b4fa02b5e9df15bb216897ea470ef658ed7d", 0x95) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 195.771695] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x1, 0x1, 0x4894, 0x3, 0x2, 0x9ee}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="7797d6a31a4f", @multicast2, @local, @local}}, 0x26) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)="00000000009ea271d9ee6ae2c6ddaad21bbc5fd4c34a60dd353563f14a5e4cd81d4eeb9153bfebd7d8c92ef7da0d1b972567c08473808c55fc2a6d69e373a495790412d7bab7ca80205c62842c4a94f5155ae16dafdd2e1755aca15273f750630cff606429f63fd84f277e8ad019b2144a888e35b5931278de12e01be8327fe5be5a67b4fa02b5e9df15bb216897ea470ef658ed7d", 0x95) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000001c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000002c0)=0xc18, 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7, 0x4, 0x10001}) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)) ptrace$pokeuser(0x6, r2, 0x96, 0x83df) 22:24:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)) 22:24:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000007) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @mcast1, 0x1}, 0x1c) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @remote}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:55 executing program 3: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = getpid() r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x5, 0x5, 0x80, 0xfffffffffffff020, 0x0, 0x8000, 0x8, 0x8, 0x9, 0x7fff, 0x3, 0x800, 0x1fe, 0x1, 0xc79, 0x401, 0x7fff, 0xffffffffffffffc3, 0x3ff, 0x6, 0x6, 0xffffffff00000001, 0xffffffff, 0x5, 0x7f4, 0x40, 0x8, 0x5, 0x100, 0x7fffffff, 0x0, 0x3, 0x0, 0x5, 0x9, 0xbb, 0x0, 0x400, 0x6, @perf_config_ext={0xff, 0x101}, 0x20010, 0x3, 0xb8a, 0x0, 0xcdcf, 0x5, 0x441}, r2, 0x5, r3, 0x2) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r1) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000380)=0xe8) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() write$P9_RSTATu(r5, &(0x7f0000000440)={0x5f, 0x7d, 0x1, {{0x0, 0x3f, 0x7, 0xfffffffffffffffb, {0x12, 0x0, 0x7}, 0x20000000, 0x48, 0x1, 0x8, 0x4, 'ppp1', 0x0, "", 0x1, '@', 0x7, 'eth0lo+'}, 0xb, '::loppp0\\lo', r6, r7, r8}}, 0x5f) setpriority(0x1, r2, 0x0) fadvise64(r5, 0x0, 0x0, 0x1) 22:24:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c65302079656168002070707031766d6e65743040656d307b2b232079656168002079656168002079656168000a16df06c00ae3c0e6925a86fdf552db9d9930b220707491fa9eb8d750b2cd7c2ec62d9d4b1aa0caf5652efa04b88ce3ea113ac8f1b0f6609104e3a9288e2b9050ebd208c4494c77e516f1e55bf333028b5328d1af17ed15ba9ae1138106840f86b2f319b049139efe46f1aac669d8a2e8f3a80fdb59aff8c7cf80c32a1cf49fbaffd6ebfeffdf84e7150aa368cfc440f2755adeaa10f45fddc70837cc3111dfcc61d2d54cf1baa9f79595a0d3d7f3e9a3fdf6157a6a9ede21f1eeb42042e0cc1d00"], 0x57) 22:24:55 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) fremovexattr(r1, &(0x7f0000000080)=@random={'trusted.', '\x00'}) r2 = eventfd(0x0) dup3(r0, r2, 0x0) [ 195.947960] FAT-fs (loop4): invalid media value (0x00) [ 195.964398] FAT-fs (loop4): Can't find a valid FAT filesystem [ 195.983660] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 196.020443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26159 sclass=netlink_tcpdiag_socket pig=12957 comm=syz-executor7 22:24:56 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x3c}, 0x2c) 22:24:56 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000240)={0x400, 0x3, 'client1\x00', 0x4, "fbae29edd0b1beb2", "e659c8ea35944f2a2f223b3ecbcece53480afadcef47701e1a2f3d201bbb1c45", 0x0, 0x3}) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200), 0x0) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000300)=""/175, &(0x7f0000000040)=0xaf) [ 196.070046] FAT-fs (loop4): invalid media value (0x00) 22:24:56 executing program 5: mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x84000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@aname={'aname', 0x3d, 'configfs\x00'}}]}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x8, &(0x7f00000002c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x0) 22:24:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) munmap(&(0x7f0000005000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[{}], 0x80c5c9b036709a5) mlockall(0x1) r1 = dup3(r0, r0, 0x80000) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x1f, 0x0, 0x20, 0x1}) 22:24:56 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x3dc, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0'}, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000180)=@ax25, 0x80, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000440)=""/255, 0xff}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000bc0)=""/247, 0xf7}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x30200) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x2, 0x0, 0x2}}, 0x14) 22:24:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@remote, 0x41, r2}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000400)=""/238, &(0x7f0000000180)=0xee) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = memfd_create(&(0x7f0000000380)="3fbeaeec9b3af1bdd4c9adf22cb5234ab98cecf21f709d7c7e9c410369f3932b2f52008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877fc79a4edd7616cdad8bdea2d4d31484a6ad2892c6c47ce2db4e082eab59759c9a131443f182e8f0d7db77984e0687c7cd", 0x3) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0), 0xffffff0a}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x4, 0x7, 0x0, r4}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x1ca, 0x4) fcntl$addseals(r3, 0x409, 0x8) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="0a5cc8") lseek(0xffffffffffffffff, 0x0, 0x3) 22:24:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) [ 196.070051] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) alarm(0x9c4) setsockopt$sock_void(r0, 0x29, 0x24, 0x0, 0x300) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x3, 0x802, 0x10000, 0xc8d0, 0x7, 0x5}}, 0x50) [ 196.195952] FAT-fs (loop4): invalid media value (0x00) 22:24:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) r7 = geteuid() r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r7, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r2, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @multicast1}, {0x1, @local}, 0x2, {0x2, 0x4e21, @rand_addr=0x8}, 'vcan0\x00'}) mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff) r5 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000300)='/dev/pktcdvd/control\x00', 0x2200, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x2030}, {r0, 0x8228}, {r2}, {r5}, {r4, 0x8080}, {r0, 0x28}], 0x6, &(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)={0x8}, 0x8) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r1) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000004700)={@mcast2}, &(0x7f0000004740)=0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 196.231322] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:56 executing program 5: syz_open_procfs(0x0, &(0x7f0000000380)="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") [ 196.292336] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:56 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xffffffffffffffd7, 0x101100) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x306, @remote}, 0x8, {0x2, 0x4e20}, 'veth1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) clock_nanosleep(0x3, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0xc4382, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000003c0)=""/131) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000180)={0x1}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x7) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1000001f190000000100000001000000"], 0x3bf}, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='./file0\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100)) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) ftruncate(r0, 0x8) [ 196.389085] FAT-fs (loop4): invalid media value (0x00) [ 196.406277] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', 0x0, r7) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x21) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xae3f}, 0x4) sendmmsg(r0, &(0x7f0000000140), 0x7b, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x400, 0x60200) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/53) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000140), 0x4) pipe(&(0x7f00000000c0)) [ 196.440024] IPVS: Creating netns size=2536 id=16 22:24:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = gettid() ptrace$poke(0x4, r2, &(0x7f00000000c0), 0x81) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 196.495336] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 196.561927] FAT-fs (loop4): Can't find a valid FAT filesystem [ 196.572833] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:24:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0xffffffffffffffe1, 0x20, 0xfffffffffffffffd}, 0x10) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000ac0)=""/205) clock_nanosleep(0x4, 0x0, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x9, 0x3ff, 0x7f, 0x0, 0x0, 0x0, 0xa9b, 0x794}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xd9dbd89c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) 22:24:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x13}}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r2, &(0x7f0000000400), 0x10000234) ppoll(&(0x7f00000000c0)=[{r2, 0x2142}, {r0, 0x8040}, {r2, 0x240}, {r1, 0x20}, {r0, 0x4000}, {r1, 0x8005}, {r1, 0x80}], 0x7, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x760d}, 0x8) sendto$inet6(r2, &(0x7f00000001c0)="88a297beb1d57f7ef2c35a2e0551672fa2ea0836ef788bc42dbaaf07ebcf78ae5f4004cecadade868c5270876e357edf06b80cae9d685103963340aa840864bf436d8f67506018cc80bcdb60c0735e0890b58b0fc72106dd6a8ebb541ea7fa320c5660f58576fc342284a7238d2e8855f51d12bd831c4971e0cbcf4f605dda560a78aeffe808788a7f6c25632e8632d0577ac8a78f7fa86e29d79c439445744a68c7406fef415f6b7bef3dc7e7d8922118881fa8dbc7bdd6214085e8e1711c1e00e09e80e931c2641940af6559b020add5e5624c8340161076748a9655f7c728b25477da725af670a022ea75bb8d570050b92e78a59d8e0c96b71378", 0xfc, 0x40000, 0x0, 0x0) 22:24:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) setpriority(0x0, 0x0, 0xffe) unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2b3) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x750) sendto$inet(r0, &(0x7f0000000180)="cc649bcf1524328e07f973a7f3f1244b780f48386978c155e78d31e6ccde14a3", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffefffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f285567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf3a50b7e52190176198b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7506009a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586db20ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc70c257077f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bdc5ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b432330cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d89a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d3ec27bf0cd20b85f4bc79a2895b9c5c4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4a9e401acd96b77825cf6cb459e0c70b310c4d6f7a192c6766e75b4b50e64680b8bbe41065eac33f24c280ae6d89ef5fad05d8a9b635b052176cc3a9c2c9ffd43c0530deafd29079147dd34b5cd866e7feffe95f76695a40c216729ab52614000000000000000000d15fb7a1e1e415271a355e2920683606f9fc1e55e2bf1b5047b16c3c90280c51294756e33654a32aef0ba77bda88c545e20a6145a68d7dbf3e4ba0010fa7eeea87afa4d77297876614aebdc199a9da4b420083d16c28264dd3de22cd5add535914d9150c0efbeac1e113bd0942355438090f2b37d240238fe5a8f84e5456607e96a94254e12177ddc4399ec8dc6d26ec72e06f76c2b87ad2c42af894f689156c413e5b45015cd97cc02cf974f4680000000000000000000000000000000000000000000000000000000000000000"], 0xd03) fanotify_init(0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x80002, 0x0) 22:24:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) 22:24:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', 0x0, r7) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:56 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:56 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x403) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000001c0)="6f1005fbf46be1a1e72a4454ee5108635bdec935bd3baec00442bbb30c4c7b81255c") r2 = accept4(r0, &(0x7f0000000200)=@l2, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000180)=0xfffffffffffeffff, 0x4) [ 196.874438] IPVS: Creating netns size=2536 id=17 [ 196.932074] overlayfs: unrecognized mount option "oûôká¡ç*DTîQc[ÞÉ5½;®ÀB»³ L{%\" or missing value [ 196.937238] FAT-fs (loop4): invalid media value (0x00) [ 196.937244] FAT-fs (loop4): Can't find a valid FAT filesystem [ 196.996326] overlayfs: unrecognized mount option "oûôká¡ç*DTîQc[ÞÉ5½;®ÀB»³ L{%\" or missing value 22:24:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xf6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x100) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/43) 22:24:57 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004000)}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0afd63001000000000000000000000"], 0x14}}, 0x0) 22:24:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000027c0)='/selinux/mls\x00', 0x0, 0x0) getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', 0x0, r7) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:57 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200001, 0x0) ioctl$sock_ifreq(r0, 0x891f, &(0x7f00000000c0)={'bcsh0\x00', @ifru_settings={0x5, 0x101, @raw_hdlc=&(0x7f0000000080)={0x2, 0xfffffffffffffffa}}}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000000)={'sit0\x00', @ifru_map}) 22:24:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = geteuid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x40000, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x3fff}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r0}}) 22:24:57 executing program 7: syz_read_part_table(0x1f636402, 0x1, &(0x7f0000000580)=[{&(0x7f0000000400)="d288654538ae5b885f9ad9", 0xb, 0x10000}]) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) userfaultfd(0x80800) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)={{}, {0x0, 0x7530}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x9}}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 22:24:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f000063a000)=0x7fff, 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000240)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r3, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xd83, 0x1, 0xdf46, 0xff, 0x3}, 0xc) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000081) 22:24:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffeb6, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xffffff0b) recvmmsg(r0, &(0x7f0000002e00), 0x3ffffffffffffc0, 0x22, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x2, {0x2, 0x4e22, @rand_addr=0x4}, {0x2, 0x4e20, @rand_addr=0x1}, {0x2, 0x4e23, @remote}, 0x8, 0x101, 0x8, 0x7c, 0x8, &(0x7f0000000080)='teql0\x00', 0x100000001, 0x2, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) quotactl(0x6, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000200)="868df2ea69e198c6a62b1aa8208b5b9047f58a08ae3e9b62ed1be1e94ddda9f3352aaba2fb723a21b1b54325dad80d24b1de4be1e09ae208e79b7c90ebce7e944b3631e64ce9eb6e1962cb517e11447777e5e0001e2f401f3befb3f6abb4d85433272a12395f20cd8c42748aefa3ee72e2a1d91219de04ec772561e2907e73702d1a3ae3237745a7e45060a45d669537dfd315bffbed1c79ea26dc778cd519f5843f7d7b84d10125b94c7ab50747f79d5943c802e38063eacd8aaa6067c4193856361da9005a4e1bc20f9a32656d721f42312e81317098") openat$cgroup_int(r0, &(0x7f0000000000)='notify_on_release\x00', 0x2, 0x0) 22:24:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 197.093608] FAT-fs (loop4): invalid media value (0x00) [ 197.104941] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:57 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001140)={{{@in=@local, @in6=@remote}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001240)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) recvmmsg(r2, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f00000000c0)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f0000002880)=[{&(0x7f0000002540)=""/44, 0x2c}], 0x1, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400}) sendto$inet6(r2, &(0x7f0000000040)="040300000100000000000000c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfff0500000000000000c7a67e4b98a35d724459", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @dev}, 0x1c) [ 197.192308] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 197.256132] FAT-fs (loop4): invalid media value (0x00) [ 197.263984] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchownat(r1, &(0x7f0000000380)='./file0\x00', r2, r3, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000420001000000000000a90000000000004c126798e87c251700000000ff0200000000000000ff00000000008106cffa7ce2dcaf39ba17307a68b84bb1b479000000000000000000000000e61f5973fef20efad722b6bc0b9213c6e4500a8bfd7d33a40590e2feb9d4d0c4192df88ec4bc8a0bbd0b82bb50de2bc6d02a3f9e16b51bbc9cb48d104060a4d970f2702515c960c1f7"], 0x30}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x101c000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@mmap='mmap'}, {@access_any='access=any'}, {@access_client='access=client'}]}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0) getsockname$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) [ 197.465872] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pig=13183 comm=syz-executor1 [ 197.480020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pig=13183 comm=syz-executor1 [ 197.704775] IPVS: Creating netns size=2536 id=18 22:24:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) 22:24:57 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000002740), &(0x7f0000002780)=0x10) r6 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r8 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r6, r7) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x104) renameat(r0, &(0x7f0000000500)='./file1\x00', r0, &(0x7f0000000540)='./file1\x00') fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09c1"], 0x3f) mount$fuse(0x0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='fuse\x00', 0x20002, &(0x7f0000000880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@blksize={'blksize'}}, {@default_permissions='default_permissions'}]}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x14000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000b80)={&(0x7f0000000980), 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x118, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7a5f}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x12}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000580)={0x80000000, 0x8, 0x2, 0x7, 0x8, [{0x96, 0x100000001, 0x4, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x1080}, {0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x0, 0x300}, {0x200, 0x8000, 0x8}, {0x800, 0xb6, 0x8, 0x0, 0x0, 0x600}, {0x4c8, 0x5, 0xff, 0x0, 0x0, 0x800}, {0x2, 0x1, 0x5, 0x0, 0x0, 0x408}, {0x7, 0x3ff, 0x5, 0x0, 0x0, 0x8}]}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) execveat(r0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='msdos\x00', &(0x7f0000000340)='\x00'], &(0x7f00000004c0)=[&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='msdos\x00', &(0x7f0000000480)='msdos\x00'], 0x0) 22:24:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000280), 0x4) setpriority(0x0, 0x0, 0xffe) unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2b3) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x750) sendto$inet(r0, &(0x7f0000000180)="cc649bcf1524328e07f973a7f3f1244b780f48386978c155e78d31e6ccde14a3", 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xd03) fanotify_init(0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x80002, 0x0) 22:24:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") clock_gettime(0x0, &(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000400)={0xd, 0x800, {0x57, 0x3, 0x5, {0x1, 0x8}, {0x2, 0x1}, @ramp={0x4, 0x0, {0x1, 0x6, 0x7, 0x33e}}}, {0x57, 0x14000000000000, 0x200, {0x6, 0x5}, {0x100, 0x5}, @cond=[{0x1e, 0x0, 0x5, 0x1, 0x2}, {0x8, 0x336, 0x1ff, 0x5, 0x1, 0x2}]}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev, 0x4e21, 0x4, 'lblcr\x00', 0x5, 0x7, 0x25}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a779c74193165f1b533846b313974ec1a78751345a4cfeb9396bea1b6f36cb23663b833ea2859dfbe2261fd"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x0, 0xc8}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r5 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r5, r4) [ 197.791096] IPVS: Creating netns size=2536 id=19 [ 197.844321] FAT-fs (loop4): invalid media value (0x00) [ 197.863954] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r7 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r5, r6) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r4, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 197.985768] FAT-fs (loop4): invalid media value (0x00) [ 197.994083] FAT-fs (loop4): Can't find a valid FAT filesystem 22:24:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:58 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) [ 198.481905] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 198.489873] FAT-fs (loop4): Filesystem has been set read-only [ 198.987566] pktgen: kernel_thread() failed for cpu 0 [ 198.993115] pktgen: Cannot create thread for cpu 0 (-4) [ 198.998645] pktgen: kernel_thread() failed for cpu 1 [ 199.003885] pktgen: Cannot create thread for cpu 1 (-4) [ 199.009290] pktgen: Initialization failed for all threads [ 199.362801] pktgen: kernel_thread() failed for cpu 0 [ 199.367925] pktgen: Cannot create thread for cpu 0 (-4) [ 199.373834] pktgen: kernel_thread() failed for cpu 1 [ 199.378938] pktgen: Cannot create thread for cpu 1 (-4) [ 199.384310] pktgen: Initialization failed for all threads 22:24:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000340)={{}, 'port1\x00', 0x0, 0x40, 0x3ff, 0x0, 0x7, 0x8001, 0x1000, 0x0, 0x2, 0xffff}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x6, 0x25}) mlockall(0x5) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$notify(r1, 0x402, 0x80000008) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8bb7, 0x7, 0x0, 0x4000000000009, 0x4, 0x2000003, 0xfffffffffffffffe, 0x20, 0x4, 0x80, 0x1000, 0xfffffffffffffffb}) sysfs$2(0x2, 0x2, &(0x7f0000000400)=""/207) munlockall() ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 22:24:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r2}) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") clock_gettime(0x0, &(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000400)={0xd, 0x800, {0x57, 0x3, 0x5, {0x1, 0x8}, {0x2, 0x1}, @ramp={0x4, 0x0, {0x1, 0x6, 0x7, 0x33e}}}, {0x57, 0x14000000000000, 0x200, {0x6, 0x5}, {0x100, 0x5}, @cond=[{0x1e, 0x0, 0x5, 0x1, 0x2}, {0x8, 0x336, 0x1ff, 0x5, 0x1, 0x2}]}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev, 0x4e21, 0x4, 'lblcr\x00', 0x5, 0x7, 0x25}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a779c74193165f1b533846b313974ec1a78751345a4cfeb9396bea1b6f36cb23663b833ea2859dfbe2261fd"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x0, 0xc8}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r5 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r5, r4) 22:24:59 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) fcntl$setstatus(r0, 0x4, 0x6000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x10c}}, 0x18) capset(&(0x7f00000000c0), &(0x7f0000000240)) setpriority(0x0, 0x0, 0x0) 22:24:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x0, &(0x7f0000001540)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 22:24:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) 22:24:59 executing program 7: syz_read_part_table(0x1f636402, 0x1, &(0x7f0000000580)=[{&(0x7f0000000400)="d288654538ae5b885f9ad9", 0xb, 0x10000}]) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) userfaultfd(0x80800) futimesat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000800)={{}, {0x0, 0x7530}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x9}}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 22:24:59 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000240)=0xc) sched_setaffinity(r0, 0x3, &(0x7f00000000c0)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) getsockopt(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000000100)}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, &(0x7f0000000300)) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 22:24:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r2}) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="5cff1ccbfb8763171de93517579ed2415d0000000000000066") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)="73657467726f7570737f") preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/32, 0x20, 0x100, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @mcast1, 0x1}, 0x1c) 22:24:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:24:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', r2}) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:24:59 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@broadcast, @in6=@remote}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000001580)={0xa8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x4}}, {0x0, 0x7ff}}]}, 0xa8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x0, 0x3, 0x2786}}) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) readlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/140, 0x8c) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000a40)={{0x2, 0x4e23, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x4e22, @broadcast}, 'vcan0\x00'}) r1 = getuid() sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0088000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=@updsa={0x4a4, 0x1a, 0x9, 0x70bd2a, 0x25dfdbfc, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x80, 0x1f, 0x0, r1}, {@in6=@remote, 0x4d6}, @in=@loopback, {0x100, 0xe2b2, 0x0, 0x7, 0x4, 0xffffffffffff0000, 0x8, 0x8000}, {0x3f, 0x1, 0x2, 0x1ff}, {0x3f, 0x3ff, 0xfffffffffffffffe}, 0x70bd2d, 0x34ff, 0xa, 0x1, 0xffffffff, 0x1}, [@migrate={0xe0, 0x11, [{@in=@multicast1, @in=@multicast1, 0xff, 0x2, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, [], 0xd}, @in6=@remote, 0x7e, 0x4, 0x0, 0xfff, 0x2, 0xa}, {@in6=@remote, @in=@loopback, 0x3b, 0x2, 0x0, 0x3502, 0xa, 0xa}, {@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0xff, 0x4, 0x0, 0x3506, 0x2, 0xa}, {@in6=@mcast1, @in, 0x3c, 0x1, 0x0, 0x3503, 0xa, 0xa}]}, @output_mark={0x8, 0x1d, 0x8}, @proto={0x8, 0x19, 0x32}, @algo_comp={0xc4, 0x3, {{'lzjh\x00'}, 0x3d8, "c385a3ccac88e78ecca7d51b4ba554a1e229282a0611c195b278e91571b6d0e6618d02fef19f6a88df1d24fba33d220cdca0090f9ddb9f2084677239b26e5657f5361a73d9d16971796bdd7f17c065287fb3de019aff5082417293ca0687ad7533b78c9a4b310d80ea32fcdddc6f86700c32ac12c0cb52d4536d37"}}, @output_mark={0x8, 0x1d, 0x6}, @algo_auth_trunc={0xd4, 0x14, {{'michael_mic-generic\x00'}, 0x438, 0x180, "234eb2518b0656e333f335a6e97821be987579756d29cad5d9138b7139b1b8c57df70f50802b82600b11f816a817e0c253f0f323a04e84b053b8dd41cce41e290abe564ff65ba52162a8d46ff8fd4805a84337c5cc6168cafe96688da3da534ea5ac796ad7e7695c54e4ad76a3baf3a43fe9942d062c32c0283095355a105ce4b4dd15a268c807"}}, @policy_type={0xc}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2b, 0x70bd27, 0x70bd2c, 0x70bd25, 0x438b4665, [0x8, 0x3, 0x8, 0x3f]}}, @proto={0x8, 0x19, 0xff}, @algo_comp={0xe4, 0x3, {{'deflate\x00'}, 0x4d8, "f7b64a4222c222659ea1268d2f161e20981a6321b442846787acfd3f759103b09788ee09dfb663a10745e99bda4668075f6c929abf8979483735149e4bbd58c69cbed3bd9481d46f652259c14e36ed882ba4cb8d6c24d64dba8651dbb7695ffffdc46b3bffbc2a3038d1c95e9f65b76e821667e37b126d1bdedc5580c60f5debc7ed0921fc4381bf1a5313a3c9865ef4f3f4718eeae1bc89b3f281"}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000200)={0x0, 0x9, 0x670b}) ftruncate(r0, 0x10000) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000980)={[{@grpid='grpid'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@block_validity='block_validity'}, {@noload='noload'}, {@orlov='orlov'}, {@debug='debug'}, {@minixdf='minixdf'}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) mknod(&(0x7f0000000a00)='./file1\x00', 0x1, 0x0) [ 199.870027] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 199.882703] FAT-fs (loop4): Filesystem has been set read-only 22:24:59 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000002ac1514aa00000000010000000000e608"], 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000200)={@multicast2, @local}, 0xc) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000240)=""/214, 0xd6}], 0x2, &(0x7f0000000380)=""/94, 0x5e, 0x7}, 0x48}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/64, 0x40}, {&(0x7f0000000440)=""/70, 0x46}], 0x2, &(0x7f0000000500)=""/238, 0xee, 0x6}, 0x4}, {{&(0x7f0000000600)=@ax25, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000680)=""/131, 0x83}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000840)=""/110, 0x6e}, {&(0x7f00000008c0)=""/79, 0x4f}, {&(0x7f0000000940)=""/18, 0x12}, {&(0x7f0000000980)=""/14, 0xe}, {&(0x7f00000009c0)=""/82, 0x52}, {&(0x7f0000000a40)=""/225, 0xe1}, {&(0x7f0000000b40)=""/160, 0xa0}], 0x9, 0x0, 0x0, 0xfffffffffffffe01}, 0x8}, {{&(0x7f0000000cc0)=@ethernet, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/226, 0xe2}, {&(0x7f0000000e40)=""/146, 0x92}, {&(0x7f0000000f00)=""/19, 0x13}, {&(0x7f0000000f40)=""/3, 0x3}, {&(0x7f0000000f80)=""/231, 0xe7}], 0x5, &(0x7f0000001100)=""/19, 0x13, 0x5}, 0x9}, {{&(0x7f0000001140)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/10, 0xa}, {&(0x7f0000001200)=""/140, 0x8c}, {&(0x7f00000012c0)=""/241, 0xf1}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/106, 0x6a}], 0x5, &(0x7f0000001500)=""/156, 0x9c, 0x5}, 0x10001}], 0x5, 0x1, &(0x7f0000001700)={0x77359400}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001740)={@broadcast, @multicast1, r1}, 0xc) 22:25:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 22:25:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000340)={{}, 'port1\x00', 0x0, 0x40, 0x3ff, 0x0, 0x7, 0x8001, 0x1000, 0x0, 0x2, 0xffff}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x6, 0x25}) mlockall(0x5) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$notify(r1, 0x402, 0x80000008) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8bb7, 0x7, 0x0, 0x4000000000009, 0x4, 0x2000003, 0xfffffffffffffffe, 0x20, 0x4, 0x80, 0x1000, 0xfffffffffffffffb}) sysfs$2(0x2, 0x2, &(0x7f0000000400)=""/207) munlockall() ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 22:25:00 executing program 2: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x40000000}, 0x2c) 22:25:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:00 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) fcntl$setstatus(r0, 0x4, 0x6000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x0, 0x4, {0x10c}}, 0x18) capset(&(0x7f00000000c0), &(0x7f0000000240)) setpriority(0x0, 0x0, 0x0) [ 200.401747] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 200.411173] FAT-fs (loop4): Filesystem has been set read-only [ 200.804491] pktgen: kernel_thread() failed for cpu 0 [ 200.809874] pktgen: Cannot create thread for cpu 0 (-4) [ 200.817222] pktgen: kernel_thread() failed for cpu 1 [ 200.822522] pktgen: Cannot create thread for cpu 1 (-4) [ 200.827943] pktgen: Initialization failed for all threads 22:25:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) accept4(r0, &(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80, 0x800) [ 201.212761] pktgen: kernel_thread() failed for cpu 0 [ 201.217943] pktgen: Cannot create thread for cpu 0 (-4) [ 201.224199] pktgen: kernel_thread() failed for cpu 1 [ 201.229313] pktgen: Cannot create thread for cpu 1 (-4) [ 201.235032] pktgen: Initialization failed for all threads 22:25:01 executing program 7: r0 = socket$inet(0x2, 0x80007, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @loopback}, 0x5e) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) 22:25:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:01 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x80805, 0x0) 22:25:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:01 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) clone(0x10000, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000500)) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000a80)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) getpid() getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f00000000c0)=0x44) mq_notify(0xffffffffffffffff, &(0x7f0000000040)) 22:25:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="693101888bc5241dc9587d2393765ffcf4aa4bd66359d0f176cb550c550f799866540b38246ff247a08b850a7e873faaef0a802bbbd0a873e928724f45a20e1483ac5e0f66b3fc100b0793ce24cf8111d631633c1c86f49bf02d603c4a9a59fec67f7568b9ae2ee5b79f2239ebcee4eb93d964dc05cc6d151f7b4ecc7089a6ed064bda1a849c27ba078a65ad88d8a780d72c52859470fabec420fa4c784016e6c087aea1e90cf22f3f18ef4e829e22d1aad47993fc151a19aca329a3f103985c6bce106f2728d53134c3982d08fe7ad8a0da4c1e3642e188697553aa0187d01adfdaf447f6c767db6491699cae3ccb71665058798691", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000780)={0x30a, 0x0, 0x5, {0x7, 0x1b, 0x6d1a, 0x4000, 0x0, 0x0, 0x100000}}, 0x50) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x189c40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) mount$9p_xen(&(0x7f0000000040)='user\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='9p\x00', 0x100010, &(0x7f0000000280)={'trans=xen,', {[{@dfltuid={'dfltuid', 0x3d, r1}}]}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 22:25:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)) r0 = socket(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000340)='IPVS\x00', &(0x7f0000000380)='IPVS\x00', &(0x7f0000000400)='\x00'], &(0x7f0000000580)=[&(0x7f00000004c0)='/dev/loop#\x00', &(0x7f0000000500)='/dev/loop#\x00', &(0x7f0000000540)="bb8a2e5e2d5e2700"], 0x1500) write$sndseq(r1, &(0x7f00000003c0), 0x0) r2 = dup2(r0, r1) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x600, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) fcntl$getown(r3, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) getresuid(&(0x7f0000000440), &(0x7f00000006c0), &(0x7f0000000700)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) setresuid(r5, r6, r7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x7) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 22:25:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2ea) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713d9ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4c0) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x8de) 22:25:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xfffffe0e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 22:25:01 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x40, 0x3}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x8) pwrite64(r1, &(0x7f0000000180)="dbf7f83bd1fc3eaa5355388c0c4d7d4ef4279a57bbb093cb84839cf0ecdcac9293dbafabe8ce60c4daeb5e2e38790b750dc82b9fa1e735df54a7e9e6ac0e6602fdc6b90f735d5045409c4bf8cc2d277015cb492025ef54376c0b8e2fddc7c354", 0x60, 0x5a) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000540)={'eql\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0}) nanosleep(&(0x7f00000002c0)={r2}, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f0000000380)=""/72, 0x48, 0x3}, 0xbadd}, {{&(0x7f0000000400)=@ax25, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/11, 0xb}], 0x3, &(0x7f0000000600)=""/46, 0x2e, 0x8}, 0x1000}, {{&(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/41, 0x29}, {&(0x7f0000000700)=""/66, 0x42}], 0x2, &(0x7f00000007c0)=""/180, 0xb4, 0x3}}, {{&(0x7f0000000880)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/188, 0xbc}], 0x4, &(0x7f0000000c40)=""/250, 0xfa, 0x80}, 0x6}, {{&(0x7f0000000d40)=@generic, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/12, 0xc}, {&(0x7f0000000e00)=""/12, 0xc}], 0x2, &(0x7f0000000e80)=""/137, 0x89, 0x1ff}, 0x5}], 0x5, 0x1, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)) 22:25:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:01 executing program 7: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000180)) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000640)) accept4(0xffffffffffffffff, &(0x7f0000000200)=@alg, &(0x7f0000000000)=0x80, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/189, 0x2) 22:25:01 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x4400, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xb0200, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000001c0)={0x5, 0xff, 0xe086}) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000200)) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000100), 0x4) close(r2) r4 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='+losystem\x00', 0xfffffffffffffff8) preadv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/113, 0x71}], 0x5, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000180)='.dead\x00') keyctl$setperm(0x5, r4, 0x2040000) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/create\x00', 0x2, 0x0) dup3(r6, r2, 0x80000) dup2(r0, r2) keyctl$set_timeout(0xf, r4, 0x3f) 22:25:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x4002, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={r1}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0x200, 0x3, 0x100000000}, 0xfff, 0x9, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x1, 0x2, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syzkaller0\x00', 0x10) 22:25:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:01 executing program 7: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0xfffffffffffffe50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/217) process_vm_writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}], 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) write(r3, &(0x7f0000000400)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x4, 0x0) 22:25:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 201.601886] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 201.609912] FAT-fs (loop4): Filesystem has been set read-only 22:25:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0xfffffffffffffe50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)=""/217) process_vm_writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}], 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) write(r3, &(0x7f0000000400)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000000c0)=0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x4, 0x0) 22:25:01 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002980)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002b40)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@local}}, &(0x7f0000002c40)=0xe8) lstat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002d40)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000002e40)=0xe8) r7 = getgid() r8 = geteuid() getgroups(0x7, &(0x7f0000002e80)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xee00]) stat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000003140)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000004a0381c5a200108874b05f7cf5df6ea181d84bffaad5549675ee8a1ac9d380ba9f9768462a770b0d1880c7819dc29d460ba252f25007febfc9da1a095e15c80f65005c41a68f4dfad29c5596c4db3b5846e15c563b7d13236d8385c64f8f7988138a138bde44d7d398acea55e128ab0890d9400aaa53a1e0b102bd140eb6b673ded5f0d560d3edba11da7422104e82cebb44da4180b060f459aa0a0b5a0dedc0d9c2ae75ffb5c307a577eb25328b68d75c9b3bae42456aea6d2ddc4849c4191abb5dd72027bbbcc68b67090c2045599e828dd8e8eac74ef69f52c296f0de92bf57fd51ba43e46506c709b082ea2aa97308a292f841aecb7e52800390a3b48e82fa17b8179a54d8eadc004451e41c516332966f29bb044e82c85c544d37a4d8165141f5416c02f9dc258fa53544d4d4829f164b52f8419c780d1203c62607e5e871e26cfdca4231e473ba581f330782fe3228795f7ae6c1ec75f7a57a08a3c1ab27e840d85b165fdd04c29cea5d51df1191bd22a8bcadffb85e09af37748b980a51a228c9f9ce1965c88af4fc82216e2db1a06888e899ac3b42f537f377b522ed5a65401ab18ae8c4a0091142ab77b840c44a0cf0378408002300", @ANYRES32=r1, @ANYBLOB='\x00\x00'], 0x12c0}, {&(0x7f0000001600)={0x136c, 0x18, 0x0, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1200, 0x40, [@typed={0xe8, 0x25, @binary="2167c5374f0f4fc1b0076a5fbbe7557a413c5044fb52e073897d5fc8805747fa11b379dff8149ca1ff679cf5f3c7769fbfd3aff560bfac5660261d38962bd17eb2863e9eb2aafc72e11f8c6e59999d67880c0b74e7b3e0a81bfe85537900c5d792df9a1e69378848a0323801d42b463ee1546546fbe1eec155fd3dd74d4aa179a6d8425789f4ba253c09c92fc13d75815521a6f54216dd8b5b59a1e793d4e822c3de530361837eb0d441ee635a84ee43ff1d30903958df1a54323510c8e9c6e1001a614cb39424ce89bb90145df7f64519ac913a8c4314e100eeca73a1523f5a7d608b"}, @typed={0xc, 0xa, @u64=0x10000}, @typed={0x1004, 0x51, @binary="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"}, @typed={0x4, 0x36}, @typed={0x8, 0x32, @fd=r1}, @generic="bd1e11f6d793c50d6c741bccc0f3b6d93b978d988e49de84d766ee948cc0144c2e107d602f9d9b2846e5d2894827ab959c2ab7f7e477c11f3bea668a20b64e0efaec42ba3e275647f1535c5ffc320a5d0e9c1cc0a333173e11f7f00c07ed687976c17d736b36872567bf5690c5779e39b553ae9c874d35bf967ccc39e77f2660a9578b8385f8703e355ab720e052aa11c8cb29e57f856954d1286356d72e542c6103c6b6960ed0354d3bae83fc8f7f", @generic="978ab39bcbf48af9e83709ccc8aab474d821b207da03108e8f4fb16bb8f6b482343c27fc660d6baebbb2000e5688c2a36ffc93eb675f34a0aa562c786db2d4772ad886f5919c"]}, @generic="5f9be0f5042158b5fd28987a07e559ac025056c1b4243a3e04178346875f07a983e229287326c56ab97c6e1c2e11a4301e72b677f571b00531a9de4aba18dbb6ba0f562ab03da46c148ca58d0ec4690cd1867527a57216ee4800d2579a81fb575eb3e97636c64ef342c1b1c8594729af743e13e154779dd7022a", @nested={0xb4, 0x77, [@generic="c1f94010bd65a25747e40d74a329f50ae4b5191d0597c869b753ac37aae0f8fa4b5af1a9c41edf1db8abaa2bab0be52bf6973557ec96a416d22097c75ee74efedeb4992cec766321559ba8f6a8f1f55bc6cee17fd52cacf02570162372ad4b3bdce5d665b1273a68e0ab91fca251c04fab85dae73aa53761e1a7ed253cad98b9d05b130b4e103dbfefefaa1815c0be8c88cb44428d46e26d4c8054a4", @typed={0x14, 0x2, @ipv6=@ipv4={[], [], @rand_addr=0x6a}}]}, @nested={0x18, 0x8b, [@typed={0x14, 0x91, @ipv6=@mcast2}]}, @typed={0x14, 0x3a, @ipv6=@remote}]}, 0x136c}, {&(0x7f0000000100)={0x20, 0x27, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@generic="9dc8185269c2b1ce53e7818ba035"]}, 0x20}, {&(0x7f0000000140)={0x40, 0x2d, 0x300, 0x70bd26, 0x25dfdbfe, "", [@generic="2af137eff6266f57445cdfbabc14b2a969b43d0797671a95dcdb5df115a8b7b21914855bec740aa08d74bc0bd529"]}, 0x40}], 0x4, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r0, r2, r3}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r0, r4, r5}, @cred={0x20, 0x1, 0x2, r0, r6, r7}, @cred={0x20, 0x1, 0x2, r0, r8, r9}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r0, r10, r11}], 0xe0, 0x40080}, 0x40000) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xc, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) tkill(r0, 0x1000000000013) 22:25:01 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae4102") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000180)={0x60000000}) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000380)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000540)='127.0.0.1\x00', &(0x7f0000000740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000580)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000t=0x0000000000000000,cache=loose,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c72713d3078303030303030303030125c024165e69142839182902dd1894d300400000000000000"]) mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_matches\x00') sendfile(r3, r4, &(0x7f0000000340), 0x80000002) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000400)}) read$FUSE(r2, &(0x7f00000040c0), 0xffffffffffffffc1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 22:25:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 201.811829] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 201.827185] FAT-fs (loop7): Filesystem has been set read-only 22:25:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2ea) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713d9ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4c0) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x8de) [ 201.926355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26996 sclass=netlink_route_socket pig=13462 comm=syz-executor7 [ 201.934407] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 201.934412] FAT-fs (loop4): Filesystem has been set read-only [ 202.029369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26996 sclass=netlink_route_socket pig=13464 comm=syz-executor7 [ 202.151925] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 202.160086] FAT-fs (loop4): Filesystem has been set read-only 22:25:02 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x421, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) fcntl$setlease(r0, 0x400, 0x2) syz_open_pts(r1, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000000c0)="f8f550e6", 0x4) r4 = socket(0xa, 0x4, 0x3) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") read(r3, &(0x7f0000000100)=""/254, 0xfe) 22:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fsetxattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='\x00', 0x1, 0x3) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85715070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) unshare(0x400) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x2c, 0xd7, 0x4, 0x4, 0x1, 0xf5b, 0xffffffff, 0xfff, 0x7, 0xbcd, 0x81, 0xfff}) setsockopt$inet6_int(r2, 0x29, 0x100000000000010, &(0x7f0000000000), 0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(r1, 0x1, &(0x7f0000000100)="295ee1311f16f48f491070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7573017c9730f69828fe656c696e75782f73556174757300"], &(0x7f0000000380)=""/219, 0xdb) socket$inet6(0xa, 0x6, 0xfff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r7 = dup3(r6, r5, 0x80000) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 22:25:02 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x1000000003) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x34) 22:25:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2ea) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713d9ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4c0) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffefffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf3a50b7e52190176198b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc70c257077f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bdc5ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b432330cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e9"], 0x8de) 22:25:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f00000002c0)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26) ppoll(&(0x7f0000000000)=[{r0, 0x4001}, {r0, 0x1c}, {r0, 0x8000}, {r0, 0x60}], 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x82}, 0x8) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000025c0), 0xfffffffffffffe02) sendto(r0, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92) recvfrom$unix(r0, &(0x7f0000000180)=""/154, 0x9a, 0x0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xffffffffffffff10) 22:25:02 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 202.466386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13498 comm=syz-executor5 22:25:02 executing program 5: socketpair$unix(0x1, 0x15, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) umount2(&(0x7f00000007c0)='./control\x00', 0x2) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/194, 0xc2}], 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000000800)=[{0x60, 0x0, 0x92, "bfca228917abe505c3e437fb53b8219d76544493d83ed7af3460281fc3f6c09d7d64438153d018afb014669d7b1ec5f4a6fef587d0da4d8c2d59809416ef8f7d767993de021f827a6474f23da6b56f"}, {0xb0, 0x0, 0x6, "ef88371b33731db576980e9a89aa49f9b0fb10d78c3635211c71f97ee907a10d28adb6c893fdcc66e86e7034da772ad0b5fb8d8a122e17e3762e6a7164eacce3e88dced836c0101638fc6a23061bf2ff62c0bb817d69d8305502e246cbedc6263a0d98dc9761ca715df039e9234f254256ab350da5f110e46b610dbac2e10c7c6cbb01aa9ffc6130e80af655d7123cab41462d5290e7d332f3feed5cecabd8ee"}], 0x110}}], 0x2, 0x0) 22:25:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x1000}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40001, 0x4d) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) [ 202.509296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13510 comm=syz-executor5 22:25:02 executing program 5: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x8048, 0xa05b) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x400800, 0x0) readlinkat(r2, &(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)=""/92, 0x5c) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000200)='./file1\x00', 0x0, 0xffffffffffffffff) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="01ab6ed4c6bc87aafed6cba92d0eb769119bf806a81bc13e8a73766df6ebd4d3d1d7eceb39a0f1fc9712f37bdaca75ddbd6d88dd9e2e5455b7225e0807415c6a9a37ffae8923e85de529fa59cfda9bacb44d6c2f67952b9de60e234275000000006978"], 0x62) ioctl$VT_DISALLOCATE(r2, 0x5608) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000040)={0x1, 0x64, 0x800, 0x0, 0x0, 0x0, 0x0, 0x80050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x2000006, &(0x7f0000000580)) listxattr(&(0x7f0000000580)='./file2\x00', &(0x7f0000000840)=""/95, 0x5f) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x0, &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x0) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/12, 0xc) getpeername$packet(r0, &(0x7f0000000780), &(0x7f0000000800)=0x14) mount(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000740)='aufs\x00', 0x0, &(0x7f0000000780)) [ 202.941671] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 202.949480] FAT-fs (loop4): Filesystem has been set read-only 22:25:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x240, 0x0, 0x0, 0xffffffffffffff46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000280)) wait4(r2, &(0x7f0000000340), 0x1000000, &(0x7f0000000380)) write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0xfffffffffffffffe, 0x1, {0xd0f6, 0x6, 0x0, {0x5, 0x4, 0xfff, 0x0, 0x401, 0x9, 0x0, 0x100, 0x0, 0xffffffff, 0x0, r3, r4, 0x6f7c, 0x7}}}, 0x78) sendfile(r0, r1, &(0x7f0000000240), 0x80001) 22:25:04 executing program 7: r0 = memfd_create(&(0x7f0000041000)="b8c0a9b7", 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000000340)) r3 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r3, r4, &(0x7f0000000000), 0x1000000008) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) fcntl$lock(r2, 0x40000000080005, &(0x7f0000000180)={0x0, 0x2, 0x100000001, 0x40, r1}) tkill(r1, 0x15) poll(&(0x7f00000000c0)=[{r2}, {r0, 0x8580}, {r3, 0x2002}, {r0, 0x4001}, {r3, 0x80}, {r5, 0x8000}], 0x6, 0x3ede) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2) dup2(r6, r0) write$sndseq(r0, &(0x7f0000000e50)=[{0x0, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7) 22:25:04 executing program 1: r0 = socket$inet(0x2, 0x5, 0x10001) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @rand_addr}, {}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)='bridge_slave_1\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @rand_addr=0x7fff}, {0x307, @dev={[], 0x1a}}, 0x8, {0x2, 0x4e21, @multicast2}, 'ifb0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) 22:25:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000001900)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000001c0)=""/216) 22:25:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000040)) getdents(r2, &(0x7f0000000200)=""/183, 0xb7) tkill(r3, 0x1004000000016) close(r1) 22:25:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2ea) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x4c0) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x8de) 22:25:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d00)={&(0x7f0000000340), 0xc, &(0x7f0000000cc0)={&(0x7f0000000e00)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={&(0x7f0000000080), 0x0, &(0x7f00000008c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="000000000004000100"], 0x18}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) 22:25:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 204.832239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pig=13566 comm=syz-executor1 22:25:04 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x4, 0x7, 0x2a, 0x5, 0xffff, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000200), &(0x7f0000000180)=0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001740)={0x0, 0xfffffffffffffffc, 0xe0, 0x4, @scatter={0x7, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001400)=""/191, 0xbf}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f00000014c0)=""/100, 0x64}]}, &(0x7f00000015c0)="86d6fb55e1c24a4280a9a49a1b5c1ffaea198103d97b3c4026ec35f70f55b5e4465aca130427f1ec6cb478e8105f9151b6d6a390af4b5fcbf6236adae1e8d8de237066fab4e6b35f04894c6ceb9ae63e990e4e402b348dab1d84511e563690bcc1f6594aa45cd471e07a4299dee63c61237f397dda7bdd9e2a1fd8d4e066e18212081878d4a8da9935d380c3afb702d9301265edf5a87fd1c9d21072237c10ea6c236387f30c6a02c73be4d30ad2da195ee620251e08cc06ef782a33b0de765c98bec867067e0bb5956fd44e68dc477f973f245631af57d1cb985c441ba9f328", &(0x7f00000016c0)=""/107, 0x0, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)}) ioctl$int_in(r1, 0x5473, &(0x7f00000017c0)=0x5) [ 204.884149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8246 sclass=netlink_route_socket pig=13562 comm=syz-executor5 22:25:04 executing program 7: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x5) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x40278f}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000540)=""/4096, &(0x7f0000000180)=0x1000) sendto$unix(r2, &(0x7f0000000300)="c0901e9ccd7b18d24827344ff93f047d78ded42efc928067d1e258a42e2728e749c441db0ab8368d60b725fb1601d0e116e156db8e58955101a3b84905fc319dd404a8112bf763dad4b9d96e8edf8e5e5155ddc09714a5e657fc5e43e10f2a2b321acbf6d075255314a4c9cfe3dd5f6f2ac6e77dbfdf9281c4c7e9e30622864fbb320b28578ecb2901de67f846cb182c1cfc4caadce60934ce1bdad30d56ad62192f8d1e787cdfa35d0f3caac9b97e67991b78a8b3a93efd4ea8629a4168bd6fdc8705d98fbade69aae734554ce39365b74a3b481b4748dbad6a3ad2d7f8bd40c6b63f1b0d929041", 0xa9, 0x40, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0x60) 22:25:04 executing program 2: symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1400) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)=""/215, 0xd7) [ 204.897573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pig=13574 comm=syz-executor1 22:25:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, &(0x7f0000000040)="f2f7c917fabd0cc5a68aca975586485f5cefb7258c0bf9ba2a4cd9c269f15cd05dc323b3b3ddfa6a37e8a17eef1575af72888d8c6bd2ba4edd6fec88c1f96c0ee8c429569cc2a5f7d654919787f1080bddb1ba0df37203d87d37f2459ef778ec83934a590790d8a44cf40b7560726fdc934de2c3a9a9d4ec7cd307bd901fa95f388a880c028652d2c56f8cfc0b3030adf48caccbdb00cd4e725d76735362dc094a18e208c8b3e3e94fff0e22a37b2fc9f0c5042009c7298fbe7a6d3645571151cb64f07b4eabf3706916384f", 0xcc, 0x1, &(0x7f0000000140)=@sco={0x1f, {0xcd8b, 0x0, 0x22, 0x1d, 0x9, 0x4}}, 0x80) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x80000, 0x0) 22:25:05 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffffffffffe, 0x3, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000040)=0x1, 0x0) 22:25:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x1}, 0x555}}, 0x18) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000300)) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000000140)=0xc) bind$packet(r1, &(0x7f00000001c0)={0x11, 0xff, r3, 0x1, 0x5, 0x6, @dev={[], 0x1e}}, 0x14) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) r4 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) dup2(r4, r1) 22:25:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8044, 0x0) getdents(r1, &(0x7f0000000180)=""/216, 0xd8) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x6000, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x4, 0x4, 0x9, 0xff, 0x5f, 0x8}) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000340)) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x283, &(0x7f00000020c0)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x232, &(0x7f0000000280)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002580), 0x150, &(0x7f0000002740)=""/246, 0xffffffd1}}], 0x2, 0x40000002, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000380)={'raw\x00', 0xe0, "fbfdc3e75a7940e2f273afd007c76d69c4e76eb70fadf6fe2827511b9f24d0a8ee5eb5ffd4022542fbd806d7e91d57c55aae858fab23f9337ed94b40c58a3f015f11fea31229a4891bc4f1389e7e87361b7dc3d6d48ab32ccd6cc7829c873876c7c5b696230fd44de41a93a165e2be6c42024f09c1ff022c0c2dbb416da1e2cbcc91e509144a91bfbbe1df17485b33fbd2d79231a9c4fe45a5651d85ae613c7730f2426207c3a099f33d32b3cb556226f8875e10def43ae5c62f1a3cae539685b1fafdfd2d66a50e18cf397bbb4b5157be1d85f030bdd3b31b7992beaaedf903"}, &(0x7f00000004c0)=0x104) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r4, @loopback, @rand_addr=0x43b}, 0xc) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 22:25:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f00008a3000/0x2000)=nil, 0x2000, 0x0, 0x48010, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x4008002, 0x0, 0x0, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x2}) 22:25:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001800)=ANY=[@ANYBLOB="00800000000000000000f27d"]) r1 = socket(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r1, r2) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e24, @loopback}}) sendmsg(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x1}, 0x3, 0x3}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="99b6e2326ef7dfd5b3a05cc4843150bd04a24655689205e8ce173a1fafa434f5e44f24d3ccc4afcc0b5eb88370e2632f31c7275c7a6cb2689a60ed", 0x3b}, {&(0x7f0000000180)="24a14d530c2b340aaaa3b007a6c7565e6e3de97869c2511d41a2b4d9424b410f61e77e3c8f883374fd08711e8ba594e0933345958ec012", 0x37}, {&(0x7f00000001c0)="452283ecaa6acbe91c1f04", 0xb}], 0x3, &(0x7f0000000400)=[{0xb0, 0x111, 0xffffffffffffff01, "22d31b385290ed000e7e48606f6b0acc53ffcbc68d83fb625d911e1acf191fe30d3d73be13885a4335feae33354ef8fef754507ff76073fc31b3b5a091e2209f1563c5af6e1102ce394b60a2fb81ef4e30e6d8fac9cd1c5a3208ee189d496564c995efa8da92db78231a72ff69a10bd23f87eec8f64ed163847f02cab5d17a3db82ec3d8a120f52006691f4cacdcfe8c60d66c6c80240e3d2654a7b48aaac9"}, {0xe0, 0x109, 0x6, "6cfc59f2c2c1827efd000b1bfdc86556102012068926322f9b9a045e896466ab50a3ca59d8cfb603d1a05e6cd741845fd0922eb81d0ef9517e8dbfa265468f6c1fd679721a82f7b2404cdae5c0002117c9429fc9820186179da571db935b6140f45a38bd388033d9b188c110e1d261b7d31ef16bdc7f5576efb786bed3f886c39d416528ecaa327dc92d6392c6df8e4abb60325e12abaa91bdc0bb57fd0316096b05021e7dd861b7df3ab9f75fc6e2ce6795907b4befaac3baef0e732842df7ff738d7593d90b7eedca02a"}, {0x108, 0x0, 0x8, "05c846cf4eb6d488d2054492e4d3c131cfd66579770c9b6b7fc0aaf4f1a456dc999d41289c76f5f4d1b7d7bf7a16addeaa4a79d505dfc84f5809aa77ee6f288ed2faa690bc5318590fb98d283bf3714da04008649d9279da112ac02b3081f3875d7a160b6b64a5463bee7ba40f75c7239c6c33cd1d433c8badc4fe13dd023aa9a3e1a9532dacfe428021edd74eede3ed1d8e2dba22474821e33922b89e63982136a14285f7f32a76ea231ea3c734056fa86c0789ebedc0f7dd5f9d1aa33175abbe7a6b45dad5738515b389f815a47c5163183f378ac4aa3c200824f07e7a867f782577848bfa720c874dc6f04db0f6ffe755"}], 0x298, 0x40000}, 0x4040000) [ 204.993699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12849 sclass=netlink_route_socket pig=13562 comm=syz-executor5 22:25:05 executing program 0: r0 = dup(0xffffffffffffffff) mknodat(r0, &(0x7f0000000440)='./file0\x00', 0x128, 0x1000) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141041, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x4004040, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e23}, 0x10) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06", 0x21) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="3f7171b0e73658c166c4ab4c4050", 0xe, 0xfffffffffffffffb) add_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000005c0)="990a5d25414182bb1f1bafed398906cc81e7816391d7", 0x16, 0xfffffffffffffff9) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0x4) fcntl$setown(r5, 0x8, r2) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="40d4859c7cfb7557809727bc9d657da26686b6ce36fca9f219c708fb7aa80720825aa3f545e35a1013449e4010103ee0", 0x30, 0x8800, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000600)={'ah\x00'}, &(0x7f0000000640)=0x1e) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 22:25:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:05 executing program 2: r0 = perf_event_open(&(0x7f0000005fdd)={0x2, 0x78, 0x19a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10051, r0, 0x0) fchmod(r0, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/124) perf_event_open(&(0x7f000000efbe)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000016fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:25:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001180)='/dev/null\x00', 0xcd4af60e578533c, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000011c0)={0x2, 0xfffffffffffff001, 0x62a, 0x0, 0x7309, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000400)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) gettid() process_vm_readv(0x0, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x4, &(0x7f00000034c0)=[{&(0x7f00000023c0)=""/104, 0x68}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/7, 0x7}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4, 0x0) r3 = gettid() r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001200)='/dev/md0\x00', 0x86800, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000001140)={0x1, 0x4, 0x0, 0x3, r3}) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001240)={0x55, 0x1, 0x1c081302, 0xffff, 0x101}, 0xc) tkill(r3, 0x2b) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x281, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000003500)=ANY=[@ANYBLOB], 0x0) 22:25:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001800)=ANY=[@ANYBLOB="00800000000000000000f27d"]) r1 = socket(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r2, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) dup2(r1, r2) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e24, @loopback}}) sendmsg(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x1}, 0x3, 0x3}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="99b6e2326ef7dfd5b3a05cc4843150bd04a24655689205e8ce173a1fafa434f5e44f24d3ccc4afcc0b5eb88370e2632f31c7275c7a6cb2689a60ed", 0x3b}, {&(0x7f0000000180)="24a14d530c2b340aaaa3b007a6c7565e6e3de97869c2511d41a2b4d9424b410f61e77e3c8f883374fd08711e8ba594e0933345958ec012", 0x37}, {&(0x7f00000001c0)="452283ecaa6acbe91c1f04", 0xb}], 0x3, &(0x7f0000000400)=[{0xb0, 0x111, 0xffffffffffffff01, "22d31b385290ed000e7e48606f6b0acc53ffcbc68d83fb625d911e1acf191fe30d3d73be13885a4335feae33354ef8fef754507ff76073fc31b3b5a091e2209f1563c5af6e1102ce394b60a2fb81ef4e30e6d8fac9cd1c5a3208ee189d496564c995efa8da92db78231a72ff69a10bd23f87eec8f64ed163847f02cab5d17a3db82ec3d8a120f52006691f4cacdcfe8c60d66c6c80240e3d2654a7b48aaac9"}, {0xe0, 0x109, 0x6, "6cfc59f2c2c1827efd000b1bfdc86556102012068926322f9b9a045e896466ab50a3ca59d8cfb603d1a05e6cd741845fd0922eb81d0ef9517e8dbfa265468f6c1fd679721a82f7b2404cdae5c0002117c9429fc9820186179da571db935b6140f45a38bd388033d9b188c110e1d261b7d31ef16bdc7f5576efb786bed3f886c39d416528ecaa327dc92d6392c6df8e4abb60325e12abaa91bdc0bb57fd0316096b05021e7dd861b7df3ab9f75fc6e2ce6795907b4befaac3baef0e732842df7ff738d7593d90b7eedca02a"}, {0x108, 0x0, 0x8, "05c846cf4eb6d488d2054492e4d3c131cfd66579770c9b6b7fc0aaf4f1a456dc999d41289c76f5f4d1b7d7bf7a16addeaa4a79d505dfc84f5809aa77ee6f288ed2faa690bc5318590fb98d283bf3714da04008649d9279da112ac02b3081f3875d7a160b6b64a5463bee7ba40f75c7239c6c33cd1d433c8badc4fe13dd023aa9a3e1a9532dacfe428021edd74eede3ed1d8e2dba22474821e33922b89e63982136a14285f7f32a76ea231ea3c734056fa86c0789ebedc0f7dd5f9d1aa33175abbe7a6b45dad5738515b389f815a47c5163183f378ac4aa3c200824f07e7a867f782577848bfa720c874dc6f04db0f6ffe755"}], 0x298, 0x40000}, 0x4040000) 22:25:05 executing program 0: perf_event_open(&(0x7f0000ff3f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4080, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x7, 0x2, 0x401, 0x60}, 0x10) 22:25:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001180)='/dev/null\x00', 0xcd4af60e578533c, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000011c0)={0x2, 0xfffffffffffff001, 0x62a, 0x0, 0x7309, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000400)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) gettid() process_vm_readv(0x0, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x4, &(0x7f00000034c0)=[{&(0x7f00000023c0)=""/104, 0x68}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/7, 0x7}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4, 0x0) r3 = gettid() r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001200)='/dev/md0\x00', 0x86800, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000001140)={0x1, 0x4, 0x0, 0x3, r3}) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001240)={0x55, 0x1, 0x1c081302, 0xffff, 0x101}, 0xc) tkill(r3, 0x2b) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x281, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000003500)=ANY=[@ANYBLOB], 0x0) 22:25:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001180)='/dev/null\x00', 0xcd4af60e578533c, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000011c0)={0x2, 0xfffffffffffff001, 0x62a, 0x0, 0x7309, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000400)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) gettid() process_vm_readv(0x0, &(0x7f0000002300)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x4, &(0x7f00000034c0)=[{&(0x7f00000023c0)=""/104, 0x68}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/7, 0x7}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4, 0x0) r3 = gettid() r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000001200)='/dev/md0\x00', 0x86800, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000001140)={0x1, 0x4, 0x0, 0x3, r3}) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001240)={0x55, 0x1, 0x1c081302, 0xffff, 0x101}, 0xc) tkill(r3, 0x2b) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x281, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000003500)=ANY=[@ANYBLOB], 0x0) 22:25:05 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x10001) unshare(0x4040000) r2 = signalfd(r0, &(0x7f00000000c0), 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x111002, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000200)={r2, 0x0, 0x5, 0x400, 0x9}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000f2cbd7000ffdbdf25010000000800050036090000380001000c0007000400000001000000080003ea4e2300000c000700000000000000000008000800050000000c000700000000002000000095323a7c0b17aa67c347ad4abe474d5bc9775f176955afaf3b2fab701d8aef9470074652e050759452af134cadd58df6e95d9b76f4010c0c32b66d3a583fd58130f6559f4b4b2226192c5dd6199d0d478c90dba79d259520eaf63ddf1ef85928ef6662cf48294831bbfb"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x404600, 0x0) write$P9_RLERROR(r5, &(0x7f0000000100)={0x9, 0x7, 0x2}, 0x9) [ 205.522516] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 205.532383] FAT-fs (loop4): Filesystem has been set read-only 22:25:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='mEmory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x6cea, 0x1}) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f00000002c0)=""/248, &(0x7f00000003c0)=0xf8) getresuid(&(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getgroups(0x7, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee00]) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000540)={@loopback, r4}, 0x14) write$FUSE_ENTRY(0xffffffffffffff9c, &(0x7f0000000200)={0x90, 0x0, 0x2, {0x0, 0x3, 0x2, 0x821e, 0x41e4df08, 0x8001, {0x1, 0x88, 0x5, 0xff, 0x8, 0x4, 0x400, 0xea6a, 0x8, 0x3fa, 0x0, r2, r3, 0x100000000, 0x876}}}, 0x90) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x20000100000000}) 22:25:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000000000)='vmnet1proc\x00', 0xb, &(0x7f0000000100)='{}\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$input_event(r0, &(0x7f0000000080)={{0x0, 0x2710}, 0x0, 0x7fffffff, 0x3}, 0x18) 22:25:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="240000001a002503006bb4175da7aa4f307b730408000900010000ffffffff00000000ffff00000000000000", 0x2c) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f00000000c0)="bf9469bf06bc2f6f533622e881d51a90bf39d44e0b5714f5d6f1578660e71f6eda9d725b9760631fd5b2f72b4a659b6f8e98df72dab75bf0e2feb3aa3084b7d6acf0391911f750dd2c88bb745225c70524ec2a6d187e902cfd6b8317adb043f2e6888cd610819f32978f9e446ba35ea19223f821b2632b6847a7562f814c0284f952bc47f557e60a68894a0b11ed6aa5ff87eef3af905ac3") ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000280)) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x1, 0x6f3c2d2c, 0x3}, 0xa) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0xdc7, 0xffffffff80000000, 0x40, 0x7fff}, 0x10) recvmsg(r0, &(0x7f0000002080)={&(0x7f00000008c0)=@hci, 0x80, &(0x7f0000001f80), 0x0, &(0x7f0000002040)=""/60, 0x3c}, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x00', 0x2) mq_getsetattr(r1, &(0x7f0000000340)={0x85, 0xb799, 0x1f, 0x8, 0x2, 0x2, 0x8, 0x4}, &(0x7f0000000380)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x48000, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 22:25:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x6eb3ff37, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 22:25:05 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:05 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0xff2, 0x8001, 0x2688}) ioctl$sock_ifreq(r0, 0x8935, &(0x7f00000001c0)={'vlan0\x00', @ifru_ivalue=0x3}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000280)=""/31) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) r2 = epoll_create1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) splice(r2, &(0x7f0000000200), r3, &(0x7f0000000240), 0x0, 0x0) 22:25:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) r1 = dup2(r0, r0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f00000000c0)=""/240, &(0x7f00000001c0)=0xf0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) [ 205.962045] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 205.973310] FAT-fs (loop4): Filesystem has been set read-only 22:25:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x7, 0x2}) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x10000000000, @loopback}, 0x1c) listen(r1, 0x0) readv(r0, &(0x7f0000002440)=[{&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x4) sched_setaffinity(0x0, 0xfffffffffffffd54, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x10000000000007) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x200000000000007}, 0x1c) sendmmsg(r2, &(0x7f0000000140), 0x7b, 0x0) epoll_create1(0x80000) close(0xffffffffffffffff) userfaultfd(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002480)='net/rpc\x00') write$P9_RXATTRCREATE(r3, &(0x7f0000000240)={0x7, 0x21, 0x1}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mlockall(0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x5, 0x90480) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) [ 206.032159] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:25:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)) 22:25:06 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/4\x00') ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000400)="0db2f168af94ac1cb35b5bcf01b7fc467515f44ff01bea08f81078ca9b9bef33139163fd19898fb16edbca53363ee93c81a9be2bc64871d7095a5790f63b55730e19411ea28b8d80a45224251d8378bb3ae77ce3d86e614231f51c36c3f677fc8ccccf13aec43f86c7b799764121e830988b74f420fdb9bbeab4136515f7d8a7fb03218c7be7ba80221a4aa91c163bf3efcee801c63117a2") r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000200)=@abs={0x1, 0x0, 0x1}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendto$unix(r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) getsockname(r2, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000000c0)=0x80) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000300)="bcf11da48f2db52dabb8e0bda6df7d1e954436c94f91b4bb348537ca533ab56eff53e930dddcfba03e988148194ab638bfffacfe290c4d0b54dee9049a0e3e1bd37e3dccabb5494489937de7437f753e3e50a5da3ef28fe1241e03ee7c102983a240ea8f85fedff633ceff506e7a47b9f12b76a7559596341bd05e50f779d0ce9241074ca5611ce99901a16d09429ec36cdbdffe8be395e1d1205b2cf929755a76ad1b9cec32ee14ec7301e5696f8dfc8494f5ce2dcdeadca4fb3c6ceb2c683da684a3ecd7cca2dd420000", 0xcb) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='session=0x000000000000000a,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636b3d7374726963742c6d61706ff6c736a889f0ba6c2c636865636b3d7374726963742c0000000002b36bfd0b1349a58f6a1036f4fd6a265fa75438c8fc0ae577fef761f46c134fbdc85526a5d2854ae5725b69bd70f1eda41325"]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f00000001c0)=0x40000) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x400000) 22:25:06 executing program 3: timerfd_create(0x0, 0x800) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 22:25:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:06 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)="0a5cc80700315f85715070") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, r0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/231) exit(0x10000000) dup2(r1, r0) 22:25:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x3c, @rand_addr=0x8001, 0x4e22, 0x1, 'ovf\x00', 0x20, 0xfffffffffffffff9, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x3, 0x2, 0xfffffffffffff9e8, 0x2}}, 0x44) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 22:25:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000057b5636e3188e9873df14460007d6947b464ebbec8a6154ce1512da4470bfbdde797da380fdf1a3c0478c9b22457e44d387ff8e307b76ada46ef8ed05bd0235a61fccc7959a5b780b25285ec9ed96c5a591bb0cac8f686d5a843302b13fc7982b9054b3eca582c02fb4a786e7958a47255adc7066216141a64d7da64a0622fc46edbeb193970fc59c428f64763459f9444723df91224630cca3600e8a01e44b560c4f76c6c9f92db22555897dd77bead4d4f42a3230f6fd70242bebc4bb972ec174e37424293", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c0002000800030000000000"], 0x38}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$TIOCCONS(r1, 0x541d) [ 206.406101] IPVS: set_ctl: invalid protocol: 60 0.0.128.1:20002 [ 206.419865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25525 sclass=netlink_route_socket pig=13741 comm=syz-executor2 22:25:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getown(r0, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000600)=0x8, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x40}, 0x20) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x1, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000740)) write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000dc0)=""/193, &(0x7f0000000280)=0xffffffffffffff36) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000880)={0xffff, 0x100000000, 0x7e, 0x0, 0x9}) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) syz_open_pts(r3, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480), 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="8e8043e6c81d", 0x6, 0xfffffffffffffffd) keyctl$unlink(0x9, r4, r5) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000940)=0x3, 0x4) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x314) setresuid(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x10) 22:25:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 206.572770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25525 sclass=netlink_route_socket pig=13741 comm=syz-executor2 [ 206.586082] IPVS: set_ctl: invalid protocol: 60 0.0.128.1:20002 [ 206.842855] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 206.855805] FAT-fs (loop4): Filesystem has been set read-only [ 211.064857] IPVS: Creating netns size=2536 id=20 [ 211.236452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 211.252838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 211.313745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.328327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.388009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 211.402989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.418203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.434506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.089241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 212.123767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 212.129905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.137675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:25:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:12 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0), &(0x7f00000002c0)="9e96cb4bf3043fa15360", 0xa, 0xfffffffffffffffe) modify_ldt$write2(0x11, &(0x7f0000000340)={0x1, 0xffffffffffffffff, 0x4000, 0x7fff, 0x0, 0x100000000, 0x5, 0x8, 0x100000001, 0x51ce}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/checkreqprot\x00', 0x100, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/252, 0xfc, 0x6, &(0x7f0000000740)) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000780)=0x65) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") write$P9_RLERROR(r3, &(0x7f00000007c0)={0x64, 0x7, 0x2, {0x5b, "617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697"}}, 0x64) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000480)) sendfile(r3, r4, &(0x7f0000000280)=0x38, 0x2000000000000001) sync() clock_gettime(0x0, &(0x7f0000000140)) sync_file_range(r0, 0x9e, 0x401, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) r5 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)='wlan0cpuset\x00', 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000540)="d4a0ac6f7224de8fe50df28167c4f3c471bd49a4b80a6f0c0b39cba03b045b59fa9e5ce27e1b549599527fc8bd9d90079e7d22f03eb141345793b46041938313f938d0f6bb8d3ee8be2e7814183cc628c95af792bc728215ef1991cb92827e4201c7d452b309bc8a20da1f6c3106ee1400d8392983046882ad39b59b3f2a650d56b8f88b76f1d76a5cbaeb58a8fca941fd81e084a1e9985ff14d", 0x9a, r5) keyctl$negate(0xd, r1, 0x7, r5) 22:25:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x4065cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @rand_addr}, 0x8) syz_open_procfs(r0, &(0x7f00000001c0)="6f6f6d5f73626f72655fa50f2247c4269643c352409a29b2d94af041d0bc54c3901b356f33462dcf38dc") write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0xa8722d562a1103ad, 0x0, 0x1}}}, 0x18) 22:25:12 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x3d9, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0xfffffffffffffe16}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000140)=""/22, 0x16}], 0x7, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 22:25:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000004c0)) socket(0x17, 0x800, 0x8001) getdents(r3, &(0x7f0000000400)=""/135, 0x74) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) dup2(r4, r0) 22:25:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getown(r0, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000600)=0x8, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x40}, 0x20) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x1, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000740)) write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000dc0)=""/193, &(0x7f0000000280)=0xffffffffffffff36) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000880)={0xffff, 0x100000000, 0x7e, 0x0, 0x9}) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) syz_open_pts(r3, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480), 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="8e8043e6c81d", 0x6, 0xfffffffffffffffd) keyctl$unlink(0x9, r4, r5) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000940)=0x3, 0x4) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x314) setresuid(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x10) 22:25:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfbe9, 0x400000) fcntl$getown(r0, 0x9) getpgrp(0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x40000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000840)=ANY=[]) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000140)={0x14}, 0x14) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000400)={0x77359400}, 0x10) readv(0xffffffffffffffff, &(0x7f0000001400), 0x0) write$evdev(r2, &(0x7f000004d000)=[{}, {}], 0xff91) 22:25:12 executing program 7: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:12 executing program 0: socketpair(0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @mcast2, 0xffffffff80000000}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgrp(0xffffffffffffffff) getpgrp(r3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) dup3(r2, r1, 0x0) [ 212.514109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 22:25:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x4065cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @rand_addr}, 0x8) syz_open_procfs(r0, &(0x7f00000001c0)="6f6f6d5f73626f72655fa50f2247c4269643c352409a29b2d94af041d0bc54c3901b356f33462dcf38dc") write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0xa8722d562a1103ad, 0x0, 0x1}}}, 0x18) 22:25:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 22:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 22:25:12 executing program 7: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:12 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 212.878888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 22:25:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000004c0)) socket(0x17, 0x800, 0x8001) getdents(r3, &(0x7f0000000400)=""/135, 0x74) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) dup2(r4, r0) 22:25:13 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:13 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x440) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @multicast1}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 'ifb0\x00'}) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b200ff0fa20a00000000000003000000060000008c7001a65fdc3322b800002482ab8ca54fc5ed20ecce8f64fd8c230322b0e320f0b51aba727191a78569a90097a0f9b8d5d2db4602959b5d0eafd259dea0e99cb3dfe4c824b981f1feb0c3cd7a59ee3ccdec853417f3cf5140a08ec74958ce9eb78ddfe12341219af6d072f5915e17e17175884376242adc9d28d91df10b166d185935fab45df92949145fd094d5dd779d031bcf97674110e9c0e736628ce1d5498e98000000000000000000000000000000"], 0x1ca) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x4e21, @multicast2}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x7, 0x5, 0x33e9, 0x9, 0x0, 0xfc000, 0x40, 0x4, 0x7, 0x2, 0x80000000, 0x3, 0xa20963f, 0x101, 0x1024, 0xfffffffffffffffe, 0x88b, 0xa6, 0x11c48485, 0x5, 0xfc44, 0x8000, 0x4, 0x0, 0x6, 0x5, 0x3ff, 0x2, 0x695, 0x8001, 0x800, 0x4, 0x3, 0x0, 0x5, 0x10000, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x4}, 0x18881, 0x4, 0x44, 0x1, 0x8, 0x0, 0x20}, r2, 0x0, r1, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)="912c62646576252600") 22:25:13 executing program 7: perf_event_open(&(0x7f00000016c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="428e797bf6fe6dbc966e4b2203f4aede1db2296372cf15291f62348ad65c44813926c7dc1214f534dd4e0dd82988f60a3575466ef6ad44ae553ca6773ef147bcdd32081d07c6ccc8a0c611f40f5497bae86e7e0d70a42927b22153b7c87e88ff8fa1bff66063854aa877c6b83554ea96672c608116528ddbbc2483837840f0eaf56054f5d7621074d480073c49e270c2bfd31f26a9ba029afb35fe92bc7f609a8255a9830dbc2e076f92379f5fed8d45d475ebf0f581509feb1da5170db57b21cc7cacc739a01dafc897e51632b9be41e2f966b7e34525ea40f58d3b5948ac5c3a42dfadc6eaeea395cc22fb3d834400f37ffa9d4c07390b55c334cd92713402") clock_gettime(0x0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x5, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r4, &(0x7f00000005c0)={@void, @val={0x2, 0x4, 0x3, 0x4c1, 0x8, 0x80000000}, @ipx={0xffff, 0xab, 0x95d0, 0x0, {@current, @random="025b874847ae", 0x7}, {@broadcast, @current, 0x3}, "79a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b6b5ea7c8e3712fc1fd52f8c30b4df423604f42fb115286bc04c032c6239119c74193165f1b533846b313974ec1a78751345a40deacb31c23fcd50ea28b5f3cfeb9396bea1b6f36cb23663b833ea2859dfbe2261fd4448374c0340a6b96ee7bb"}}, 0xb5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x0, 0xc8}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000440)) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000240)=[{0x16cb, 0x2, 0x9, 0x7ca}]}, 0x10) dup2(r6, r5) 22:25:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000000340), 0x38f, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x280080) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x200800900000002) 22:25:13 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x1, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0)) 22:25:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fcntl$getown(r0, 0x9) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x3, 0xfffffffffffffff7, 0x2, r3}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ftruncate(r4, 0x80003) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendfile(r1, r4, &(0x7f0000000080), 0x8000fffffffe) socket$inet6(0xa, 0x800, 0x5) mlockall(0x2) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) [ 213.241818] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 213.254432] FAT-fs (loop4): Filesystem has been set read-only 22:25:13 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000003c0)={0xffffffffffffffff}) accept$inet(r0, &(0x7f0000000400)={0x2, 0x0, @local}, &(0x7f0000000440)=0x10) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000000c0)) wait4(0x0, &(0x7f0000000100), 0x40000002, 0x0) r1 = socket(0x2, 0x80000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) write$FUSE_LK(r2, &(0x7f0000000380)={0xffffffffffffffb4, 0xfffffffffffffffc, 0x1, {{0x10000, 0x0, 0x1, r3}}}, 0x28) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x100) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000200000080000000000000003000000000000001f00000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000ffffff7f000000001f00000000000000030007010000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010001000000000002000000000000001f060001000000000000000000000000000000000000000000000000000000000000000000000000000400000000000001000000000000000800000000000000a3ff33040000000000000000000000000000000000000000000000000000000000000000000000000010000000000000ffff0000000000000100000000000000aa0007ff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000006c000000000000000100000000000000040604090000000000000000000000000000000000000000000000000000000000000000000000000000008000000000a70000000000000007000000000000000100054700000000000000000000000000000000000000000000000000000000000000000000000002000000000000000008000000000000070000000000000000a30303000000000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) 22:25:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 213.283743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 22:25:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) accept4(r0, &(0x7f0000000140)=@can, &(0x7f0000000040)=0x80, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) dup2(r0, r1) 22:25:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x6, 0x200008000) clone(0x2000000, &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000300)) ioctl$KDSETLED(r0, 0x4b32, 0x8000000000000006) memfd_create(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[{}], 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) kexec_load(0x0, 0x0, &(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 22:25:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:13 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) tkill(r1, 0x33) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x2, 0x4) [ 213.678754] 9pnet: Insufficient options for proto=fd [ 213.740326] 9pnet: Insufficient options for proto=fd 22:25:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:13 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r2 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r4}, 0xc) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x101040, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000001c0)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r2, r4}, 0xc) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=r1) getcwd(&(0x7f0000000280)=""/169, 0xa9) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000001340)={0x16, 0x1000, &(0x7f0000000340)="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"}) fgetxattr(r5, &(0x7f0000001380)=@known='security.evm\x00', &(0x7f00000013c0)=""/239, 0xef) sendmsg$nl_generic(r5, &(0x7f00000018c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001880)={&(0x7f0000001500)={0x380, 0x36, 0x220, 0x70bd25, 0x25dfdbfc, {0x11}, [@nested={0x268, 0x18, [@typed={0x8, 0x7b, @ipv4}, @generic="407315c9a51a1025646f4eee6a1f66363d8591808f5bc4edfdef6238a15b95265eecf614e53802ca4dcb858c50c030f6f32ea66fcbc24455447dba02d2601289e7d82db41d85785f297b8dc1c37868bcc9d92fcdfae77f136ee8ce4ebae64830dc522c1c91cc5b09802d9514954289c581c76614eee37b734ac54f7f6abd12bd3931f70e1acc82223d0621931a0a32e696b0e3a382cbe7e927573a7287e63429dc235dba91ebb781c6af687f8c293dbf2d416f6ed9e87d29eea10f817b127e308a07eec2c0b6cb79469e1c", @typed={0x14, 0x76, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @generic="6a7074366dbe9cb3aebb6b28", @typed={0xc, 0x60, @u64=0xf0}, @generic="4227cfea60174bade200426d118537155d4520b5dd7a233efe51186af8a368258c57cfd6ad4978d838a8386c474898241922854fd008794172de4524d912b2647f172c5c0463d3df6bab01297cc221bd5f11ed7291f37615cb05f8c95167cd42f49f105220e2f4a1d503f755cd83ee810b5adb9ab082a4e67da9cd6f0f1b366f0ab5691c3ba5693daf92a3282445eb437454c39d5ea412026f263b6de76f2dbc2d43d3251959142beabfb632721c0936b5537fcda614db836e034f0aeac3c9fb0207c35de503419d4c292d3716579217345e71", @generic="c8e69f5d8075e669d0dd7238de43cec11d2cafa09d20057a819f58a4302eb417fcf6145379001f5083887acb1902c1d84c26156a3d1f46b012dbc42e701e93edef2a4d9a093ff45668dd965535ba99407546404e8ca671341f3691ae7faa9afb2ee8089cb8ec92f8c10e13dd7700e662c1cfc2ae0b9223df83bf49106ac8fae77ea98f1f37d4009aaf32bf3f4db9b204093f"]}, @generic="1e2dc0b6bbad1306478fa673743030c8e452bde626", @generic="02f99d78b9ccb6ac97bddba1c2bfcae55f0f6a4cd80972d7f96ca2ffed16d5664d8537d2c61ff49f9a9662fcef80a6ac8feef288e225d13ecaa05beb57f09b9cafa9f940f7153b5e588b1859de91459089deac6a558c2fa5a081dca61181f2712f116a8ad7016be0a2b2ec8b64f77c6ac4da7ea5c0ae7b8886475db4f3263ed8590bd874b687000bfac7cfb80315a308d82f0247bafffde8660de8bf9457d7aca0a99bdcb2eb04668286927333315398f70f4b15b1b9a98311776b2addb79d19f01ed169ec85bb4a7457ba611c1d535034ac8a8faa23e7d63c224eb2c5e618fbcbe0469560aad28c485937b00d77e0"]}, 0x380}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000001900)={0x9, 0x2, 0x0, [{0x0, 0x4, 0x6, 0x8941, 0x1, 0x62}, {0x8, 0xc6, 0x5, 0x3, 0x3085, 0x40, 0x7fff}]}) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) write$sndseq(r5, &(0x7f0000002a00)=[{0x3, 0x8000, 0xffffffffffffffc0, 0x2, @time={r7, r8+10000000}, {0x9, 0x7f}, {0x37, 0xe3}, @addr={0xfffffffffffffffe, 0xb44a}}, {0xe5db, 0x8, 0x1, 0x4981cba2, @tick=0x9, {0x9c22, 0x8}, {0x1, 0x7}, @control={0x0, 0xee, 0xff}}, {0xd8ef, 0x1af, 0x8, 0x4, @tick=0x4, {0x4}, {0x0, 0x81}, @ext={0x1000, &(0x7f0000001a00)="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"}}, {0x1, 0x7b7f, 0x20000000200000, 0x1, @time, {0x8001, 0x8}, {0x5, 0x4}, @time=@tick=0x6}, {0x6, 0x9, 0x100000000, 0x2, @tick=0x7, {0xffe0000000000000, 0x1}, {0x4, 0x1}, @raw8={"7089a0694afa74eaf3f8a5f0"}}], 0xf0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0x9c, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3606}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x283c}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002cc0)={r1, r3, r4}, 0xc) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000002d00), &(0x7f0000002d40)=0x8) removexattr(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)=@known='user.syz\x00') process_vm_writev(r1, &(0x7f0000003e40)=[{&(0x7f0000002e00)}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003f80)=[{&(0x7f0000003e80)=""/241, 0xf1}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000003fc0)={'ip6tnl0\x00', {0x2, 0x4e20, @multicast2}}) pselect6(0x40, &(0x7f0000004000)={0x101, 0x5b2f, 0xffffffffffffff01, 0x0, 0x94, 0xffff, 0x6, 0xff}, &(0x7f0000004040)={0x8001, 0x4, 0x7a, 0x2, 0x9, 0x3f, 0xffffffffffffffc0, 0x4}, &(0x7f0000004080)={0x3, 0x6, 0xad, 0xfff, 0x519, 0x8, 0x2, 0x5}, &(0x7f00000040c0)={0x0, 0x989680}, &(0x7f0000004140)={&(0x7f0000004100)={0x1}, 0x8}) fdatasync(r6) renameat2(r5, &(0x7f0000004180)='./file0\x00', r5, &(0x7f00000041c0)='./file0\x00', 0x1) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000052c0)={'filter\x00', 0x0, 0x3, 0x1000, [], 0xa, &(0x7f0000004200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000042c0)=""/4096}, &(0x7f0000005340)=0x78) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000053c0)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005440)={&(0x7f0000005400)={0x24, r10, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x40c4) 22:25:13 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) recvmmsg(r0, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/214, 0xd6}], 0x5, &(0x7f0000000580)=""/4096, 0x1000, 0x1}, 0x7}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f0000001600)=""/120, 0x78}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3, &(0x7f00000027c0)=""/224, 0xe0, 0x6f}}, {{&(0x7f00000028c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000002940)=""/153, 0x99}, {&(0x7f0000002a00)=""/112, 0x70}], 0x3, &(0x7f0000002ac0)=""/228, 0xe4, 0x3}, 0x7fff}, {{&(0x7f0000002bc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000005080)=[{&(0x7f0000002c40)=""/177, 0xb1}, {&(0x7f0000002d00)=""/106, 0x6a}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/41, 0x29}, {&(0x7f0000002dc0)=""/187, 0xbb}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/173, 0xad}], 0x7, &(0x7f0000005100)=""/218, 0xda, 0x9}, 0x16fe}, {{&(0x7f0000005200)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000006340)=[{&(0x7f0000005280)=""/21, 0x15}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/124, 0x7c}], 0x3, &(0x7f0000006380)=""/7, 0x7, 0x100000000}, 0x9}, {{&(0x7f00000063c0)=@ipx, 0x80, &(0x7f0000006500)=[{&(0x7f0000006440)=""/159, 0x9f}], 0x1, &(0x7f0000006540)=""/4096, 0x1000, 0x3}}], 0x6, 0x40000000, &(0x7f00000076c0)={0x0, 0x1c9c380}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000007740)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007780)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000007880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000078c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000079c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000007a00)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000007a80)={0x11, 0x0, 0x0}, &(0x7f0000007ac0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000007b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000007b40)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000007c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007c40)=0x14) accept4$packet(r0, &(0x7f0000007c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007cc0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007d00)={'ip_vti0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000a480)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f000000a580)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000a5c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a600)={'veth0_to_team\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f000000a9c0)={&(0x7f0000007700), 0xc, &(0x7f000000a980)={&(0x7f000000a640)={0x32c, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x20c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9b7a}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) close(r1) 22:25:13 executing program 3: accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x8, @mcast2, 0x2}, {0xa, 0x4e24, 0x2, @remote, 0x1}, 0x6, [0x101, 0x1ff, 0x80000000, 0x6, 0x2, 0x5, 0x10000000000000, 0x4]}, 0x5c) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x17, 0x2, 0xffffffffffff7fff}, {{}, 0x15, 0x4, 0x1140}, {{0x0, 0x2710}, 0x1, 0x2000000000010000, 0x7}], 0x48) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r2) 22:25:13 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x6e19a4032fafd0ef) socket$netlink(0x10, 0x3, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x7fffe) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x12000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000200)=0xc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000240)={r4, 0x1, 0x6, @random="8bced0eb5dff"}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000280)=""/222) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) 22:25:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x6, 0x200008000) clone(0x2000000, &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000300)) ioctl$KDSETLED(r0, 0x4b32, 0x8000000000000006) memfd_create(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[{}], 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) kexec_load(0x0, 0x0, &(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 22:25:13 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r1, 0x1, 0x0, 0x10000101) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getpgid(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'ip6gre0\x00'}, 0x18) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/4096, &(0x7f0000000280)=0x1000) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 22:25:13 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="1089c39aeaa033bf246b52e093bbf90490272cd48f1f5f3d8b53431fab738ab1c7a0ba847bf5922a2dfbfc95"]) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x12) 22:25:13 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000280)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8008700b, &(0x7f00000000c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file2\x00', r2, &(0x7f00000002c0)='./file1\x00') mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) 22:25:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000018c0)={'filter\x00', 0x0, 0x4, 0xb4, [], 0x7, &(0x7f0000001780)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001800)=""/180}, &(0x7f00000016c0)=0xfffffffffffffea0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1, 0x2000000008000) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2b709e6ec7642d637075202d637075202b6d656d6f7279202d6d656d6f727920dfd6d07b0bdad2600a562364ea89c9e2fb213cf580223cc720c76ff664fece8f6d8a19dd8188e173adff5940c667d1d90fc8a5ddefcfa191972b7b6e4e1930bca0f04b8d79f3f43257a2eb574ea0675280fe6062191dd176435fecefbb676d7719db8997f7f475510cdaaaa631bab4ced6"], 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000280)={{}, 'port0\x00'}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x4, 0x10000]) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000040)=""/80, 0x50}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/251, 0xfb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7) fcntl$getown(r2, 0x9) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001680)=0x10001) 22:25:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="0a5cc80700315f85715070") unshare(0x8000400) getsockname(r0, &(0x7f0000000000)=@alg, &(0x7f0000000100)=0x1ca) 22:25:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 213.821843] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 213.854410] FAT-fs (loop4): Filesystem has been set read-only 22:25:13 executing program 2: unshare(0x2000400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x20901) fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6, 0x3, 0x100000001, 0x5, "8c9d09e5a9696986e0f056a6c351c0e15b14ee2fd10cbfe8eed17cb4b8530f1f"}) setns(r0, 0x0) 22:25:13 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 213.914746] tmpfs: No value for mount option './file0' 22:25:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f0000000200)="0a5c000700315f857150705f97ce64d3efbb75babbd045e58405dbe6017e3d61d93230f3162a596c31626ddf6b3c2528c2254f1afebd89cd2e61ed13ac84d6f3be8399ada4cf9918a0557f65669a8f283925ea1d91658a8473906210b6371d08c4d5527d88c82326f315d6fbeb3f2a050e8283d02696") mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x2011, r0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x0) getuid() stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000003980)='/dev/ppp\x00', 0x0, 0x0) write$P9_RMKDIR(r2, &(0x7f00000003c0)={0x14, 0x49, 0x1, {0x88, 0x2, 0x2}}, 0x243) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0xffffffffffffffff, 0x2, {0x7, 0x1b, 0x40, 0x2008, 0x4, 0x800, 0x8, 0xe776}}, 0x50) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000fc0)={{{@in=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000e80)=0xe8) getegid() recvmmsg(r2, &(0x7f0000003840)=[{{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/28, 0x1c}, {&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f00000008c0)=""/97, 0x61}], 0x8, &(0x7f00000010c0)=""/4096, 0x1000, 0x80000001}, 0x3ff}, {{&(0x7f00000009c0)=@hci, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/57, 0x39}, {&(0x7f0000000a80)=""/47, 0x2f}, {&(0x7f0000000ac0)=""/66, 0x42}, {&(0x7f0000000b40)=""/219, 0xdb}, {&(0x7f0000000c40)=""/55, 0x37}, {&(0x7f0000000c80)=""/85, 0x55}], 0x6, &(0x7f0000000ec0)=""/69, 0x45}, 0x1}, {{&(0x7f0000000f40)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f00000020c0)=""/66, 0x42}, {&(0x7f0000002140)=""/158, 0x9e}, {&(0x7f0000002200)=""/238, 0xee}, {&(0x7f0000002300)=""/176, 0xb0}], 0x4, &(0x7f00000023c0)=""/57, 0x39, 0x1}, 0x5}, {{&(0x7f0000002400)=@nfc, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002480)=""/148, 0x94}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/207, 0xcf}, {&(0x7f0000003640)=""/163, 0xa3}, {&(0x7f0000003700)=""/120, 0x78}, {&(0x7f0000003780)=""/62, 0x3e}], 0x6, 0x0, 0x0, 0x8}, 0x5}], 0x4, 0x100, &(0x7f0000003940)={0x77359400}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000039c0)=ANY=[@ANYBLOB="0300000000000000ffffffff000000000800000000000000", @ANYRES32=r3, @ANYBLOB="000000000002000000000000139259886eb2d3353a97dfa1c0000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="000000004f0f00000000000000000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000000100000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000bb0000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000eb0000000000000000000000000000000000000000000000"]) geteuid() ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x8) 22:25:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:14 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x21000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000240)=0x279, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet(0x10, 0x3, 0xc) ftruncate(r2, 0xfffffffffffffffb) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) pipe2(&(0x7f0000000140), 0x4000) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x8004, 0x0, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f0000fbf000), &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl(r7, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$selinux_access(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f7e6a65636d705f743a7330202f7573722f7362696e2f6e747064303030303030303030303030303030303030003fab884380856e5f3bcd351a5df6a17829f491c97c6950ea2292f0f64516dc3daaa115e4cd4082e0bcb06e03ff3d2d87d460869e9f430cd4d522708bda7d3b71a0b7b08d19919d77c1fbb961927512ce5e3337dcded9396f5bb66280f44c6cbf991be34982f855766979b284d2e310cc20f3b338810000000000000000000000"], 0xb7) ioctl$KDSETLED(r4, 0x4b32, 0x100000000) socket(0xa, 0x2, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) dup(r6) openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/pktcdvd/control\x00', 0x10400, 0x0) [ 214.019597] 9pnet: Insufficient options for proto=fd 22:25:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 214.054440] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 214.124048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 214.511148] attempt to access beyond end of device [ 214.516117] loop4: rw=536870912, want=114, limit=112 [ 214.521370] buffer_io_error: 120 callbacks suppressed [ 214.521376] Buffer I/O error on dev loop4, logical block 113, lost async page write [ 214.534628] attempt to access beyond end of device [ 214.539714] loop4: rw=536870912, want=115, limit=112 [ 214.545004] Buffer I/O error on dev loop4, logical block 114, lost async page write [ 214.553030] attempt to access beyond end of device [ 214.558109] loop4: rw=536870912, want=116, limit=112 [ 214.563382] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 214.571455] attempt to access beyond end of device [ 214.576539] loop4: rw=536870912, want=117, limit=112 [ 214.581803] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 214.589735] attempt to access beyond end of device [ 214.596044] loop4: rw=536870912, want=130, limit=112 [ 214.602051] Buffer I/O error on dev loop4, logical block 129, lost async page write 22:25:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1000000002f, &(0x7f0000000000), 0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xeeed}, {0x5, 0x0, 0x5, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@dev, 0x4d4}, 0x0, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="7c0685d9ae015efd6ce1a77da656d1d60419555911db9b97736971c9ba23ee9b5772f2676a1a6119754669c4e56e7b1a54031b1a382dbf36e66e993010d1b2875d874f97b730c310f7ebc82018e0a4b8e5718971a041", 0x56) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x4, {0x4, 0x4, 0x1, 0x3}}, 0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1f, 0x4) 22:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x5, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bcsf0\x00', 0x1}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 22:25:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='! \n'], 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'bond0\x00', 0x200}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 22:25:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000380)=""/189) writev(r0, &(0x7f0000000580)=[{&(0x7f00000001c0)="21b77131f96efd1f78cc58ee", 0xc}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)="636c6561725f72656673000e26f4219411c8d7870771d49f76") r2 = syz_open_procfs(0x0, &(0x7f0000000140)="6e6574baff705f746101b4340d5c65426e657300") creat(&(0x7f0000000100)='./file0\x00', 0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f0000000700), 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000200)) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, 0x0) fcntl$getflags(r4, 0x40a) 22:25:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000002c0)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/24, 0x18) getdents64(r1, &(0x7f0000001300)=""/4096, 0x817) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x410a00, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000180)="e0d01a98f1bac40d583a756b1c6f271e3db4aa3c5de7abb492063c9439f937a0d20d2b0320290e90cc66daa23c707544772c863d126f60760d9f7c5c839bfa558e44021a897f122e0c1e5d79f12b4ca2d68adcbd621cb31e05f432522390aa05f143bacbb1bc396bd5c62d6a5545ce5a4f90682d45eda3927c9875654f6346fc7c7cae38bc23b04e13b59b79c9843d6785d47398544cb072ab69bb13b76d50b4ab7ac1f253a26cfb8ff22617d21a25c842252ea26c") getdents64(r1, &(0x7f0000000440)=""/210, 0x1a1) 22:25:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 214.614584] attempt to access beyond end of device [ 214.620328] loop4: rw=536870912, want=131, limit=112 [ 214.625848] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 214.638571] attempt to access beyond end of device [ 214.667112] loop4: rw=536870912, want=132, limit=112 22:25:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$inet(0x2, 0x6, 0x80000000) truncate(&(0x7f0000000040)='./file0\x00', 0x8458) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e0400", @ANYRESHEX=r0, @ANYBLOB="6ead"]) 22:25:14 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/33, 0x21}, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14, 0x800) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x180, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000600)={0x7, 0x1b, 0x2}, 0x7) [ 214.678784] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex [ 214.688556] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex 22:25:14 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x200, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000380)) getpeername$unix(r4, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r3, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r5 = getpid() mq_notify(r3, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r5}) syncfs(r4) timerfd_gettime(r2, &(0x7f0000000240)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x80000, 0x0) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x4) mq_timedsend(r3, &(0x7f0000000580), 0xfffffffffffffeb7, 0x0, &(0x7f0000fbc000)) close(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) [ 214.741387] Buffer I/O error on dev loop4, logical block 131, lost async page write 22:25:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 214.760072] 9pnet: Insufficient options for proto=fd [ 214.785841] 9pnet: Insufficient options for proto=fd [ 214.837145] attempt to access beyond end of device [ 214.859923] loop4: rw=536870912, want=133, limit=112 [ 214.877349] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 214.909332] attempt to access beyond end of device [ 214.920418] loop4: rw=536870912, want=2189, limit=112 [ 214.941995] attempt to access beyond end of device [ 214.954083] loop4: rw=536870912, want=4237, limit=112 22:25:15 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 22:25:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140), 0x4) 22:25:15 executing program 2: mq_open(&(0x7f00000001c0)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000280), 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 22:25:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:15 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/33, 0x21}, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) accept4$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14, 0x800) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x180, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000600)={0x7, 0x1b, 0x2}, 0x7) [ 214.970052] attempt to access beyond end of device [ 214.989589] loop4: rw=536870912, want=6285, limit=112 [ 215.007431] attempt to access beyond end of device [ 215.024397] loop4: rw=536870912, want=8333, limit=112 [ 215.043838] attempt to access beyond end of device [ 215.061074] loop4: rw=536870912, want=10381, limit=112 [ 215.075982] attempt to access beyond end of device [ 215.087065] loop4: rw=536870912, want=12429, limit=112 [ 215.094617] attempt to access beyond end of device [ 215.104236] loop4: rw=536870912, want=14477, limit=112 [ 215.135135] attempt to access beyond end of device [ 215.153232] loop4: rw=536870912, want=16510, limit=112 22:25:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1000000002f, &(0x7f0000000000), 0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xeeed}, {0x5, 0x0, 0x5, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@dev, 0x4d4}, 0x0, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="7c0685d9ae015efd6ce1a77da656d1d60419555911db9b97736971c9ba23ee9b5772f2676a1a6119754669c4e56e7b1a54031b1a382dbf36e66e993010d1b2875d874f97b730c310f7ebc82018e0a4b8e5718971a041", 0x56) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x4, {0x4, 0x4, 0x1, 0x3}}, 0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1f, 0x4) 22:25:15 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x200, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000380)) getpeername$unix(r4, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r3, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r5 = getpid() mq_notify(r3, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r5}) syncfs(r4) timerfd_gettime(r2, &(0x7f0000000240)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x80000, 0x0) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x4) mq_timedsend(r3, &(0x7f0000000580), 0xfffffffffffffeb7, 0x0, &(0x7f0000fbc000)) close(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 22:25:15 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9201, &(0x7f0000000080)) r1 = fcntl$getown(r0, 0x9) fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000000)={&(0x7f0000000100)="60afb9d3234ffe6d8e6ca8dcfc31cd412b15ddb66c67412fdc49e6a00e2caa8770a85cbde522452fda5518c83231b1ecbb2edaee833b25687b281e4fccb2a20f51a174f87107a2bda0f8c0a684f349c3643c77d04af4c03dcd0d43f8c22cba66c86a8b8cb0d156f7286283224d8c2130ac05f941c75abf0e2011ee036dea3ce918eee0fff9015584ccabe76bc7125fdd38bbfdc7ff4208e086d1a6c5b68f380d32d58bfeba26f10970444a9c74f6ae7f2007563766ca44bee9af9bf052c628057c08c8878a15c3f29fe689d1c1c39302", 0xd0}) 22:25:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:15 executing program 2: mq_open(&(0x7f00000001c0)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000280), 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 22:25:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0xfffffffffffffffe}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000880)='/dev/md0\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000600)={{0x7ff}, {0x40}, 0x0, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mkdir(&(0x7f00000008c0)='./file0/file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fchmod(r2, 0x2013e) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000740)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80002, 0x0) syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0xffffffffffff7538, 0x1) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000180)={0x4e3, 0xffffffffffffff6b}) sendto$unix(r3, &(0x7f0000000580)="45f0c670465b4c87423ed68a95eea42e1e0dd276d4769f6c37d4a00434b38cb45f1fdc70735458c4bd5b90a90e1be78e10e90755197eeb75ec0c6e5e9a9d2b1a7cdfd43cdc15f391956b03c0cbca92f8", 0x50, 0x80, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',posixacl,version=9p2000,version=9p2000.L,version=9p2000.u,']) renameat2(r3, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$TCSETS(r0, 0xc0045405, &(0x7f00000000c0)) sendto(r0, &(0x7f0000000800)="dbc4c8e2077e405feaac6e4336def0391d027882acf3bc52bbafb20e2f7ea2390459776bbfb30ab7c44f4e465fad340c", 0x30, 0x4840, 0x0, 0x0) [ 215.429985] 9pnet_virtio: no channels available for device (null) [ 215.570823] 9pnet_virtio: no channels available for device (null) 22:25:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1000000002f, &(0x7f0000000000), 0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xeeed}, {0x5, 0x0, 0x5, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@dev, 0x4d4}, 0x0, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="7c0685d9ae015efd6ce1a77da656d1d60419555911db9b97736971c9ba23ee9b5772f2676a1a6119754669c4e56e7b1a54031b1a382dbf36e66e993010d1b2875d874f97b730c310f7ebc82018e0a4b8e5718971a041", 0x56) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x4, {0x4, 0x4, 0x1, 0x3}}, 0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1f, 0x4) 22:25:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='veth1\x00') r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @remote}, 0xc) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000140)=0x1e6) close(r4) dup3(r2, r3, 0x0) 22:25:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) flistxattr(r0, &(0x7f0000000300)=""/4096, 0x1000) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001300)='team\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast1, @loopback}, &(0x7f00000013c0)=0xc) getpeername$packet(r3, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14) accept$packet(r1, &(0x7f00000035c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003600)=0x14) getpeername$packet(r3, &(0x7f0000003640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003680)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000036c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000037c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001580)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001680)=0xffffffffffffffb2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003940)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000003a40)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003a80)={0x0, @loopback, @dev}, &(0x7f0000003ac0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003c00)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000003d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003e00)={{{@in=@remote, @in6=@loopback}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000003f00)=0xe8) accept4$packet(r1, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003f80)=0x14, 0x0) getsockname$packet(r1, &(0x7f0000004080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000040c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005500)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000005540)={{{@in=@multicast1, @in=@dev}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000005640)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000005680)={@rand_addr, @multicast1}, &(0x7f00000056c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005700)={{{@in, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000005800)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000005c80)={'team_slave_1\x00'}) getsockname$packet(r3, &(0x7f0000005d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005dc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005f40)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000006040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000006500)={{{@in6=@local, @in6=@local}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000006600)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000006e00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006640)=ANY=[@ANYBLOB="d0030000", @ANYRES16=r4, @ANYBLOB="08002bbd7000fedbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="38010200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400b200000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000008000100", @ANYRES32=r8, @ANYBLOB="f401020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040033d5000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400001000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000200000000000a90400000300000008000400", @ANYRES32=r11, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040003000000"], 0x3d0}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl(r3, 0x9, &(0x7f00000002c0)="2894") ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000074fffc), 0x4) r15 = dup(r2) setsockopt$inet6_tcp_int(r15, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r15, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r15, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r16) ioctl$KDSETLED(r15, 0x4b32, 0x4) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x200, 0x4) r17 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x7fff) sendfile(r15, r17, &(0x7f0000d83ff8), 0x8000fffffffe) [ 215.881942] attempt to access beyond end of device [ 215.890630] loop4: rw=536870912, want=130, limit=112 [ 215.895938] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 215.904316] attempt to access beyond end of device [ 215.913623] loop4: rw=536870912, want=131, limit=112 22:25:15 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 22:25:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0xfffffffffffffffe}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000880)='/dev/md0\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000600)={{0x7ff}, {0x40}, 0x0, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mkdir(&(0x7f00000008c0)='./file0/file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fchmod(r2, 0x2013e) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000740)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80002, 0x0) syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0xffffffffffff7538, 0x1) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000180)={0x4e3, 0xffffffffffffff6b}) sendto$unix(r3, &(0x7f0000000580)="45f0c670465b4c87423ed68a95eea42e1e0dd276d4769f6c37d4a00434b38cb45f1fdc70735458c4bd5b90a90e1be78e10e90755197eeb75ec0c6e5e9a9d2b1a7cdfd43cdc15f391956b03c0cbca92f8", 0x50, 0x80, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',posixacl,version=9p2000,version=9p2000.L,version=9p2000.u,']) renameat2(r3, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$TCSETS(r0, 0xc0045405, &(0x7f00000000c0)) sendto(r0, &(0x7f0000000800)="dbc4c8e2077e405feaac6e4336def0391d027882acf3bc52bbafb20e2f7ea2390459776bbfb30ab7c44f4e465fad340c", 0x30, 0x4840, 0x0, 0x0) 22:25:15 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0xfffffffffffffffe}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000880)='/dev/md0\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000600)={{0x7ff}, {0x40}, 0x0, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mkdir(&(0x7f00000008c0)='./file0/file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fchmod(r2, 0x2013e) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000740)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80002, 0x0) syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0xffffffffffff7538, 0x1) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000180)={0x4e3, 0xffffffffffffff6b}) sendto$unix(r3, &(0x7f0000000580)="45f0c670465b4c87423ed68a95eea42e1e0dd276d4769f6c37d4a00434b38cb45f1fdc70735458c4bd5b90a90e1be78e10e90755197eeb75ec0c6e5e9a9d2b1a7cdfd43cdc15f391956b03c0cbca92f8", 0x50, 0x80, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',posixacl,version=9p2000,version=9p2000.L,version=9p2000.u,']) renameat2(r3, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x1) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$TCSETS(r0, 0xc0045405, &(0x7f00000000c0)) sendto(r0, &(0x7f0000000800)="dbc4c8e2077e405feaac6e4336def0391d027882acf3bc52bbafb20e2f7ea2390459776bbfb30ab7c44f4e465fad340c", 0x30, 0x4840, 0x0, 0x0) 22:25:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1000000002f, &(0x7f0000000000), 0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xeeed}, {0x5, 0x0, 0x5, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@dev, 0x4d4}, 0x0, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="7c0685d9ae015efd6ce1a77da656d1d60419555911db9b97736971c9ba23ee9b5772f2676a1a6119754669c4e56e7b1a54031b1a382dbf36e66e993010d1b2875d874f97b730c310f7ebc82018e0a4b8e5718971a041", 0x56) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x4, {0x4, 0x4, 0x1, 0x3}}, 0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1f, 0x4) 22:25:15 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000140)=""/238, 0xee) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x3, 0xf, 0x2, {{0x1c, 0x0, 0x1}, 0x100000001}}, 0x18) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x8) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) [ 215.957341] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 215.976166] attempt to access beyond end of device [ 215.987311] loop4: rw=536870912, want=132, limit=112 [ 216.022503] attempt to access beyond end of device 22:25:16 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0x1, 0x4, 0x7ff}) r1 = gettid() rt_sigqueueinfo(r1, 0xfffffffffffffffe, &(0x7f00000000c0)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x44d01, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8) [ 216.048087] loop4: rw=536870912, want=133, limit=112 [ 216.073050] attempt to access beyond end of device [ 216.092403] loop4: rw=536870912, want=142, limit=112 22:25:16 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="000000000000000000000000000000000010000000000000ed793afe0000000002008201260001000000640000000001270005000000000000006400000000030d0085043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="9a73d34594932b767967cc70d2ac5954a8a4811a6ed29c02de2168ba67061984656809f3e2713dcdf776efc02f0a9968efb0ff13c4e2c604c2b4e043044efa1f81e39bc692fb6563e39854801752aa3b13bc9d258fa3e3c668ed0572f3a294ed486ece19dd4a5b4580d6674489", 0x6d, 0xfffffffffffffffc) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) keyctl$reject(0x13, r1, 0xda, 0x81, 0x0) getpid() mkdir(&(0x7f0000000480)='./file0\x00', 0x40) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) keyctl$clear(0x7, 0x0) r3 = dup2(r0, 0xffffffffffffffff) mkdirat$cgroup(r3, &(0x7f0000000680)='syz1\x00', 0x1ff) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @multicast2}, {0x307}, 0x58, {0x2, 0x4e20, @multicast2}, 'bridge0\x00'}) 22:25:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x7, 0x0, 0xe8}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1000000002f, &(0x7f0000000000), 0x4) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in6, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0xeeed}, {0x5, 0x0, 0x5, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@dev, 0x4d4}, 0x0, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}}, 0xe8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="7c0685d9ae015efd6ce1a77da656d1d60419555911db9b97736971c9ba23ee9b5772f2676a1a6119754669c4e56e7b1a54031b1a382dbf36e66e993010d1b2875d874f97b730c310f7ebc82018e0a4b8e5718971a041", 0x56) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x4, {0x4, 0x4, 0x1, 0x3}}, 0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1f, 0x4) [ 216.120721] attempt to access beyond end of device 22:25:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x446081, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000200)=""/239) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x3c}}, 0x0) [ 216.159843] loop4: rw=536870912, want=143, limit=112 [ 216.181179] 9pnet_virtio: no channels available for device (null) [ 216.192825] 9pnet_virtio: no channels available for device (null) [ 216.261282] attempt to access beyond end of device [ 216.268202] loop4: rw=536870912, want=144, limit=112 [ 216.285692] attempt to access beyond end of device [ 216.292177] loop4: rw=536870912, want=145, limit=112 [ 216.308790] attempt to access beyond end of device [ 216.313862] loop4: rw=536870912, want=2193, limit=112 [ 216.323010] attempt to access beyond end of device [ 216.327994] loop4: rw=536870912, want=4241, limit=112 [ 216.335571] attempt to access beyond end of device [ 216.340574] loop4: rw=536870912, want=6289, limit=112 [ 216.347384] attempt to access beyond end of device [ 216.352414] loop4: rw=536870912, want=8337, limit=112 [ 216.359257] attempt to access beyond end of device [ 216.364956] loop4: rw=536870912, want=10385, limit=112 [ 216.372066] attempt to access beyond end of device [ 216.377015] loop4: rw=536870912, want=12433, limit=112 [ 216.384107] attempt to access beyond end of device [ 216.389045] loop4: rw=536870912, want=14481, limit=112 [ 216.399114] attempt to access beyond end of device [ 216.404130] loop4: rw=536870912, want=16514, limit=112 22:25:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:16 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) dup3(r2, r0, 0x0) getpgid(r1) 22:25:16 executing program 5: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfffffffffffffffb) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x7, 0x0, "1c05ff1201bd8de2a8a676b0aba9fb64f2223bacef1f385ff902ca443c675284bd2793c18682972ed01fd95c0fd0e582e2e43c09e6baaad9921fc72cd35cca2705d3d69c19ef59070e32968f98cc70ab"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x3, 0x0, "88356b94ae780876dd1e7bfce58829a44ae77ef564ece114d074cd80b89fedb0021c291b962bc8364d069bb5d99d4381abd01b7f05840bfcbf7f7f2bfda5c7ac02b92ed204f37f4787827bae64a56d05"}, 0xd8) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) 22:25:16 executing program 1: r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x7ff, 0x3ff, 0x2}) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21) mount(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000080)) 22:25:16 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffe, 0x2010, r0, 0x4000000000) 22:25:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7891, 0xffffffffffffffff, 0x6000, 0x100000001, 0x1f, 0xb3, 0x5, 0x1ff, 0x100000000000, 0xffffffff}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_settime(0x45d15bbf8a1cd1b1, &(0x7f00000001c0)={0x77359400}) 22:25:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x3}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0xfffffffffffffe50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) process_vm_writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}], 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x5, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000140)={0x31, 0x6, 0x0, {0x3, 0x4, 0x8, 0x0, 'vboxnet0'}}, 0x31) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) write(r4, &(0x7f0000000400)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000002040)='/dev/uhid\x00', 0x0, 0x0) 22:25:16 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffeba, 0x0, 0x0, 0xfffffffffffffde6) r1 = open(&(0x7f0000000180)='./file0\x00', 0x101102, 0x110) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x10000000004e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xe5, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in6=@loopback}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000000)="2061ce6088b14a5415b7807d948aca25873b333fc86044083486b2204b5a90232020c34eb37bb4211ef87f32dfbeb6b6d0b8d92281ff42a03722be4715bfff83a2744aa534a48dd515093f7d02f9ea72f3379aab169808b2a783f6ba020c143edcdfc81a9f3dfc943496d26c6cfdd5243c", 0x71, 0x40, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @ipv4={[], [], @local}, 0xd6f5}, 0x1c) socket$inet6(0xa, 0x5, 0xffffffff) 22:25:16 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000180)) fgetxattr(r2, &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000400)=""/241, 0xf1) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x0, {0x4, 0x0, 0x1}}, 0x14) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x3, 0x4}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r4 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$9p(r2, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'irlan0\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001400), 0x0) write$evdev(r4, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}], 0x18) 22:25:16 executing program 7: capset(&(0x7f0000000100)={0x4000019980330}, &(0x7f0000000000)) r0 = inotify_init() unshare(0x400) creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x100) [ 216.630113] tmpfs: No value for mount option '!' [ 216.635459] attempt to access beyond end of device [ 216.635466] loop4: rw=536870912, want=114, limit=112 [ 216.635481] attempt to access beyond end of device 22:25:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 216.635486] loop4: rw=536870912, want=115, limit=112 [ 216.635497] attempt to access beyond end of device 22:25:16 executing program 7: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x100, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) 22:25:16 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x5c}}, 0x20000800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x11, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) chown(&(0x7f0000000040)='./file0\x00', r4, r5) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000002c0)) [ 216.635502] loop4: rw=536870912, want=116, limit=112 [ 216.635512] attempt to access beyond end of device [ 216.635517] loop4: rw=536870912, want=117, limit=112 [ 216.635527] attempt to access beyond end of device [ 216.635532] loop4: rw=536870912, want=130, limit=112 [ 216.635542] attempt to access beyond end of device [ 216.635546] loop4: rw=536870912, want=131, limit=112 [ 216.635557] attempt to access beyond end of device [ 216.635561] loop4: rw=536870912, want=132, limit=112 [ 216.635572] attempt to access beyond end of device [ 216.635576] loop4: rw=536870912, want=133, limit=112 [ 216.636693] attempt to access beyond end of device [ 216.636700] loop4: rw=536870912, want=2189, limit=112 [ 216.638267] attempt to access beyond end of device [ 216.638274] loop4: rw=536870912, want=4237, limit=112 22:25:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 216.639845] attempt to access beyond end of device [ 216.639851] loop4: rw=536870912, want=6285, limit=112 [ 216.641413] attempt to access beyond end of device [ 216.641420] loop4: rw=536870912, want=8333, limit=112 [ 216.642937] attempt to access beyond end of device [ 216.642943] loop4: rw=536870912, want=10381, limit=112 [ 216.644442] attempt to access beyond end of device [ 216.644448] loop4: rw=536870912, want=12429, limit=112 [ 216.659735] attempt to access beyond end of device 22:25:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x3}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0xfffffffffffffe50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) process_vm_writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}], 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x5, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000140)={0x31, 0x6, 0x0, {0x3, 0x4, 0x8, 0x0, 'vboxnet0'}}, 0x31) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) write(r4, &(0x7f0000000400)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000002040)='/dev/uhid\x00', 0x0, 0x0) [ 216.659743] loop4: rw=536870912, want=14477, limit=112 [ 216.667499] attempt to access beyond end of device [ 216.667505] loop4: rw=536870912, want=16510, limit=112 [ 216.685918] netlink: 64 bytes leftover after parsing attributes in process `syz-executor6'. [ 216.840096] netlink: 64 bytes leftover after parsing attributes in process `syz-executor6'. 22:25:16 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000180)) fgetxattr(r2, &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000400)=""/241, 0xf1) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x0, {0x4, 0x0, 0x1}}, 0x14) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x3, 0x4}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r4 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x2) write$9p(r2, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'irlan0\x00'}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001400), 0x0) write$evdev(r4, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}], 0x18) 22:25:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20004014) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', r4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000300)) 22:25:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev}, 0x1c) 22:25:16 executing program 5: getrlimit(0x8, &(0x7f0000000000)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @broadcast}, {0x306}, 0x2, {0x2, 0x4e22, @local}, 'ip6_vti0\x00'}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100)) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x2710}}) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000001c0)) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x5) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r9 = getpgrp(0x0) r10 = getpgid(0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000001040)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)=[{&(0x7f0000000340)={0x324, 0x28, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x158, 0x2b, [@generic="39d5f9f5217e", @generic="13d0df5c05ed1d776657e8010908f18281f88daf19de2ef1e284d647a43406d8227e0d2556c97115b3ca7d577ca349077bcc70d441071512a5b24577028b8fb1c7c5397b7a21bb1ab84b1c3bc1d49606e8bd979c3cbb332f1c45032d298d351ba8a9ad340f4543284156264a6d656328a5d3540af6434e71591ca3a4fedad7978af20ea83fb2b647fc05b91aced4519bb46726bb69797915570067ae6190c1fd2a7c43ba5aa55b9ba019c2062616193dcf8f919a0bdd5e26ad04ba160a6bf92abbc1c474c459b1b9fc8403a75a4dcf02c81f157a4b905d6994d3ea139333c0863c58e60084ff27dd3eceefc99c7e", @typed={0x8, 0x3, @ipv4=@remote}, @generic="21d227490103aea65b4cf2a78c64287dec8f548f34076bd89ddaddf568246485ca26bd2aff4094f093777cef38e99812279873bfd115772c617cc3197afc6b85823d394740e86a016acb8d0e705844", @typed={0x8, 0x64, @fd=r3}]}, @nested={0x1bc, 0xc, [@generic="4c1df0fa26bc39fd926a4238d5ffdd079c07fef28d24fd0c8bb48aa4d817aac67aec70a81ab127dafbf20e763cc07a0360a11faa1c70b321134ddc112877b2537464d4a61ddb4a8b88ad00deca4865d10dcc5d4f5760a3add67a2356bd343c988bd419363ab128913e3623fe7005eb3cb01b5a8e3df5fe2c268052c898f251f50d1c9bc462185744d6a9ceb3d05718726cc702626c180070883e10ea5245e2706817e9d74c7453b3fb39db5bb12fcaff6a79cafa8d90cb972c2d1ea68a9a91cbdbd50581747debdff928341e7b580acf813ff57be8028e3872d89dc50bd74349539886855a810223fd38a475", @typed={0x14, 0x12, @ipv6=@mcast1}, @generic="2e2384b5d734e1b3bd20c4170da09f50d494f5e51f7afc37ce29189ebdd3d90f763eae215b15c15ec864a3d7c78ae3312deee09276374f2d78bd2c57da2073f49a06ee883f3ddb1b41663729ff3d4e0fb1a72f6070eb11a18fd94df78f8eb5d78e13e5f00e7f42dba29380a1fad320e789bae5d90fed95cb5c85ac", @generic="e234fdd60790de4a595a0d4485f203e5404f271934a6b81cc985143e787058ab840b5e74cd8194b62621a7be08b919328f65260490", @typed={0x8, 0x16, @uid=r5}]}]}, 0x324}, {&(0x7f0000000800)={0xb0, 0x1e, 0x100, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x62, @uid=r6}, @typed={0x8, 0x26, @pid=r7}, @nested={0x4, 0xb, [@generic]}, @nested={0x8c, 0x7d, [@typed={0x8, 0x6a, @fd=r3}, @generic="260712b0b0e56b4ccf4754264ebc91857843600e5d49c81c796ed74b94e002dc3ce9167154d88de08b3b0d430ded0cde68f21defc8450af18115ce1bac8ddb0cc74b124a89fad0eead8df1ed8d157e3468c6908d2dae5ec5c0a164ac54fc5d3de50dad870537435971be500bf17f6a04777df7a70551c252", @typed={0x8, 0x46, @uid=r8}]}]}, 0xb0}, {&(0x7f00000008c0)={0x704, 0x31, 0xd02, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x40, @pid=r9}, @nested={0xe0, 0x37, [@typed={0x8, 0x36, @pid=r10}, @typed={0xc, 0x92, @u64=0x1000}, @generic="f40d06ff8f9df15c70fda5f5f6cb637a903325112422c50ce5d8d3dea50a15a86d6128954b2388823158a68a9d7ae64316dff946840b96ed3de056f6f6f921afaa6f842f68", @generic="bc0410f1e478eea0c9ff2c092b8f6896df8677fbee95a8c4aa35e0ead01d630a472d5caf4c024e7446980c9e581810e08bb4a133dbe3a32ad6fb126587a8792cde6060479049cc9aab6baea7f7e4546073f9a6ff", @generic="be8049f0e71891aedd3a76bb98e81fd13cb509f9a95b89b07be0a009345116361278be0982a53943c38ee6bddc"]}, @generic="012bb0010cae57f41f15b75505809e39539159fc1f8ecd6c74f6345b418c2b284c5fa238c7bd6958015e2a5877c8a79ae59c2bf3eb3ecf24d06781ee07cd89d5e769a053934f2a717ac9e68a07a6d72284106f1237d0ee2f8174c3db69415b8cd99e102869f3735efe9ea48dd63689961998a98e1098c9dcf6dbb5a7e32570f2a025de67f4f3a576e75f1f30007f5987ae48ef4555a60355c511b35b00d1a18721ebb148919ab589afd98f8183fd0994d3ec8af81afba1e02d59f98becc7bce67f66bf1283b95f355ab81a6da4547d55ab039d889d6f3def45e289c8c2acc94e3986cb5b3b7012629c8bc867a925fe9d05a57c9a87", @nested={0x164, 0x26, [@generic="856b9087dc7d9d354d37c8cd9ecdf979a8a8a812ff194697b583dc219e8fa9f780e1ff179479cf4a9d0efad0ed3e9ec56703ee5651c03e24b86b81170fc3d443148af84ccd5f3586b3c107a274a74262844ac6461f180e9a28ae0d7874543d08bfa6341f3986ef0f34bb506b6b13700aacb45e328eab85c6fffa326ef95e8b9a628ff02324ea0808f7f66dd9cfb6e7ad2bdef692e502e7e5041526cbe3d318e16e006a786b103a9ee591000be74af483134793b42338ba0780191ffde34dabb2e5d07c26928f1e0eb0f081e5e86b91efeaef7a2f2db3f15ec80b511d431e1fab30a6b32dd7d3cecc5984b658558ef86f67b52c58d31daac9", @typed={0x4, 0x5a}, @typed={0x8, 0x5f, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @typed={0x8, 0x5b, @u32=0x3}, @typed={0x54, 0x1a, @binary="5c0ff2e867f991c572b4450635f619a129f4a8bf115f7707cda0df2dedbc974e223b934c962f329091ee1b438fe06b9776d2f36490f81e3b3f2dc5f02e2eabb1c8e59605de35028cad7c236a75477c"}]}, @nested={0x3b0, 0x5, [@typed={0x8, 0x83, @str='\x00'}, @generic="cdbf47f55189f7ffc3f7afb6208701bf2d20035fcbcd6f0cbcfeed68e388f3a5d158a7ed85fe794ed35b98c1e804ab7c3a061321d65f955650a894fde65441f6684603886ad3b59316f2d889906f", @generic="20a61413118ec88aaba5f1660ff0864db7839ce48127595557df7679aab7f850e2e283f6394a6a74bd40475e6e97cc16947f14436cb5ca7c9c80abde09828ea4536e5bc2756b3ae84567453c16ecc5bfdd7cab4117080160899d89e3db4e23d80cf461fe7cacaf5af4b7a7ce704346e8695f7d0a21e4e3750a0bc21ac1fedd1e0cb02dc73b530c5d7e3991ef7b9c0ca2f83781d7e249cd50cc3b5bbf657804f5ca7c5cf81a31644634bb327ddb1731cac289cab4c21c9f8ed19ddd220e41879a9b1f7c7b044bffa1389ff118a4d2c7054d3912faf37b7d8430522a71a22f28c50adf96", @generic="caba3f6f09cb95b90aafc9b198e7d559c7c549061f9748e3311a8d300b9162ca236de5a8c037bc4d4d71c8228df91727b5946d7ebed3d5105bfeb9c7be3aca1328653da2d4f98df24aac741a9d8a77526a68570bebfa443e14f3a8249d22f45d37b06508119ac8f8fcbed10760ba8a81bd572c6387f16cbda0f397b14a789a9bbe59b51796f84b917a7cac2a9e2be6f3605bce679b45808b35e5cf54d2a7e7d6c47ca182553125abf2161f160c2b5dcf1a1df7b7b2f517cc3c99", @generic="c21597081c9f294a4da7cd7296bb3c30a2fe50287ee75eafdb3cec76a9d29029a9e2afd837dcf4d8706fa470ba2a2d0d98bf942b6b39af72e57d35cbe6418c66d8eb21aa2836f838c17681642a52b85cba662f01474ef7e21c0e092ad23a59bb48064c1ba2ce2901d52697b1f06283819489618e1b1c9bc847387b7b6e7528ee5b6923e3b481d56246c77ae1b4a6a64cbcb419e784fdfe8bd9a5092c50bf95f1fc20cda312fc55f1403b3ba75af6318f71d887732a89ef9981f1a8db1c64e61a7249530b68", @typed={0x8, 0x7e, @fd=r0}, @generic="f4f116392c9041af43e15d5e2f21d77651681e9c15c60adc4ca2ca65e4983f5db25361fd4c605fb4b45045857bd8829798b860853df4c9e2dd8c1a16b499dcca16f892ba280c269bcba67e8a1d3bac4eaeab1d358f2d201e83d4e008509a4b8dc525e3439e0e996f4dc37d6a58f449eccbf1aaa4ca9eee8189d8c31dc3644921b871766491b89e397b762ea6afb077eccb7535028175be3340d4ed5c050e7d64", @generic, @generic="1017ad314d0fdeff86df8903c6bb0eb46d1a0081c8a78723e2d7e6a81307ac460576ef40eb933ca305767ed326f406c92092afb9f502587dc756e792ed191bec3a236c55358b01c3f13bfbf4"]}]}, 0x704}], 0x3, 0x0, 0x0, 0x4}, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000001080)={0x58, 0xffffffffffffffda, 0x6, [{0x0, 0x5, 0x9, 0x1ff, 'ip6_vti0\x00'}, {0x3, 0x1, 0x1, 0xce, '\x00'}]}, 0x58) ptrace$getregset(0x4204, r10, 0x4, &(0x7f0000001140)={&(0x7f0000001100)=""/47, 0x2f}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001180)=[{0x3, 0x1}], 0x1) sched_setattr(r9, &(0x7f00000011c0)={0x30, 0x5, 0x1, 0x4, 0x9, 0x5, 0x1ff, 0x4}, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000001200)={0x1bda7534, 0x5, 0x641, 0x4040000000000, 0x81, 0x0, 0x401, 0x3, 0xfffffffffffffbff, 0x1, 0x7fffffff, 0x80}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001240)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) openat$md(0xffffffffffffff9c, &(0x7f0000001280)='/dev/md0\x00', 0x5c9083, 0x0) mq_timedreceive(r4, &(0x7f00000012c0)=""/106, 0x6a, 0xce, &(0x7f0000001340)={0x0, 0x989680}) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000013c0)={0x200, {{0x2, 0x4e21, @local}}}, 0x88) syz_open_dev$sg(&(0x7f0000001480)='/dev/sg#\x00', 0x6, 0x10000) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) 22:25:17 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x30, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000011ff5)) 22:25:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 216.983081] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. [ 217.016279] netlink: 64 bytes leftover after parsing attributes in process `syz-executor6'. 22:25:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x0, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:17 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c65303a93d09b9973a681ca00bf7208cea68e4adbb1ce89cd19553576b23f14c6f884e896a7e95d6df81bead2676f27561fa29346d93995b4c04f90d9bc8f39acd57a2b112a9c4fa684a05d72317fecc1d37b357f8af1f618d13bb553202156f0b28c097805d2b56f66638a0cb69907141c75bb7aa90485b95780c676f77370c4dda738fd09c1425567e3d5aaaec8a393955619feaadef95d3b052aee5fca0c622a08c003226c96b79375d75790d220a809ab5f531254"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200000, 0x0) fstatfs(r2, &(0x7f0000000600)=""/180) 22:25:17 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0xa, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0037fc1807d82c99240970") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x800000000000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x200, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000380)) getpeername$unix(r3, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r2, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r4 = getpid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r4}) syncfs(r3) timerfd_gettime(r1, &(0x7f0000000240)) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x543000, 0x0) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000340)=0x5) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 22:25:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x3}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0xfffffffffffffe50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000500)=0x0) process_vm_writev(r1, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}], 0x6, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xaa}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x5, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000140)={0x31, 0x6, 0x0, {0x3, 0x4, 0x8, 0x0, 'vboxnet0'}}, 0x31) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) write(r4, &(0x7f0000000400)="1b00000042001f0fff07f4f9002304000afa04e611080041000201", 0x1b) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000002040)='/dev/uhid\x00', 0x0, 0x0) 22:25:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@random={'user.', 'mcast_rejoin_count\x00'}) ioctl(r2, 0x3dbf3915, &(0x7f00000001c0)="7367aec57518c6afac90edeedd0d1ef62d9f54b6d6acef0df23769ec728461ac93c704f9994ea10502c31d138ea8074acb5766cc418c15ec1777840356b83c77d329c6327fd29db91930332497ef977d52eedf31cf4ee194031ad2ddf325253c24f45f9fc113b96c1848ae46781eaaed0c717db54290681e6fa3645c") setresuid(r3, r3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) getsockopt$inet_tcp_buf(r4, 0x6, 0x1d, &(0x7f0000000300)=""/215, &(0x7f0000000400)=0xd7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f00000008c0)=0xe8) accept(r1, &(0x7f0000000900)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000980)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="00060000", @ANYRES16=r5, @ANYBLOB="00032dbd7000fcdbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="4c0102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400fe00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400010004000100000007000606050000000200060508000000ffff02e80500000005003f03ffffff7f38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="a40102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004c00040005000800ff0000003f000100ff07000003001506ff00000001040004f9ffffff0180ffff610b0000008000070100000001000108000001000200ff013f000000f7ff42060600000040000100240001006c625f706f72745f737463747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004008000000008000100", @ANYRES32=r7, @ANYBLOB="2c02020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fb11000008000600", @ANYRES32=r7, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400090000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ca35000008000100", @ANYRES32=r8, @ANYBLOB="b000020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004001f0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400faffffff"], 0x600}}, 0x1) acct(&(0x7f0000000440)='./file0\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d4, r5, 0x420, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1e}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x880) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f00000000c0)="cf", 0x1, 0xfffffffffffffffc) 22:25:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c3", 0x1a}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) ioctl$KDENABIO(r3, 0x4b36) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchdir(r0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) get_robust_list(0x0, &(0x7f0000000880)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x608000, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000002c0)={0x7ff, 0x7, 0x8, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='bic\x00', 0x4) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) 22:25:17 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = dup2(r0, r1) r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x10200, 0x12) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x100, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) renameat(r3, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') acct(0x0) 22:25:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:17 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000040)="4f87891d7f5f39e5f823da6985b806fd", 0x10, 0x4000004, 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000600)='./file0//ile0\x00') 22:25:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/170) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='\x00', 0xfffffffffffffffa) r3 = request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="a375c02711e220f7927f1cbd91d2286590aeba7b33602ffa7c7c91c11aa556d90a564e8ccb6029dbb7246520d093e262f2df39ec9c7ed2d95bddaab56c3e6674a958b4e6fc3bdd305ff71b190a6ce9d48a9b39705c93b35b072004e7fa36808e97b37bdf35328ef32ee2fea1fead559e495ba16a238d1545e147bdc88e4a655036f2a13022db86851bbceec83a9bf7b0206af4d9", 0x94, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, r3, r4}, &(0x7f0000000500)=""/6, 0x6, 0x0) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r5, 0x40086602, &(0x7f0000000040)=ANY=[]) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$selinux_create(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) flistxattr(r1, &(0x7f0000000540)=""/35, 0x23) r8 = getpgrp(0xffffffffffffffff) sched_getattr(r8, &(0x7f0000000580), 0x30, 0x0) write$selinux_access(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745ff43a6774635f743a7330202770642030303030303030"], 0x26) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}], 0x18) 22:25:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 217.582160] device lo entered promiscuous mode 22:25:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) restart_syscall() r1 = memfd_create(&(0x7f00000001c0)="2f4e0001000000000000", 0x3) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/15) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f00000001c0)) 22:25:17 executing program 7: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f00000002c0)='./file0\x00', 0x8000, 0x1, &(0x7f0000000700)=[{&(0x7f0000000300)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000da3700001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000140)) [ 217.603987] device lo left promiscuous mode 22:25:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdaf, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x2a}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001440), 0x0, &(0x7f0000001480)=""/177, 0xb1}}, {{0x0, 0x0, &(0x7f0000001ac0)}}], 0x2, 0x0, &(0x7f0000001c40)={0x77359400}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='FT', @ANYRES64=r4, @ANYBLOB="00a8010000000000"], 0xb3, 0x0, &(0x7f0000000240)="2a05e22653a76932b3425a286e6d74f948e8c1a9d6c56d18018cc436af345affed4736edd4d64c6bf82fbf2b66e4c635c4dcdfc708bdb8dcb37bdb962a046f75b3ae5a258c3fb1c0e07378b4262ca8cb6f34250c2b0e70fdd9df94c01e50098cb70571c7cdb1ad92d886deebd403cf50894cbd815c48ee1d7b16fbc174436b0e0392c8c5bce2b401e138ea051536b03cfbf261ee3abcd9e71e894bf5e46be1da00e3f7b41ce7f9d7ddfb583be3b2623c16e585"}) [ 217.682956] f2fs_msg: 22 callbacks suppressed [ 217.682964] F2FS-fs (loop7): Wrong SSA boundary, start(4096) end(5120) blocks(7320576) [ 217.709474] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 217.737236] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.758322] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 217.781401] F2FS-fs (loop7): Wrong SSA boundary, start(4096) end(5120) blocks(7320576) [ 217.804873] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 217.821204] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.837603] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 217.942571] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 217.953670] FAT-fs (loop4): Filesystem has been set read-only 22:25:17 executing program 5: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000380)={0x5, 0x1, 0xffffffffffffff81, 0x80000000, 0x1, 0x400}) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) 22:25:17 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe58, &(0x7f0000000000), 0x2be, &(0x7f0000000040)=""/81, 0x47}, 0x40002102) 22:25:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getcwd(&(0x7f0000000040)=""/82, 0xfffffffffffffdb4) [ 218.152056] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. [ 218.183873] device lo entered promiscuous mode [ 218.212272] device lo left promiscuous mode 22:25:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:18 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) prctl$intptr(0x1f, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280), 0x0) 22:25:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:18 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x309040, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1d000520}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001c80)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000580)=@getae={0x4c, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback}, @in6=@local}, [@mark={0xc}]}, 0x4c}}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x100) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f00000000c0)=0x80000001) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 22:25:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) dup2(r1, r3) 22:25:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:18 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x7) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)) 22:25:18 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101080, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080)) r1 = socket(0x2000000011, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) kexec_load(0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d2e13349ccfaf9d7b3dad213c01aef22d29f1ee86f0a62252f3d9b91c5ea6c9b75718257c40b851cb6581ed81931cde17edc23a11625eabc14ec4c2c1daddb59fe2727460dad199aa5ad61cb1b1ed25b1c6557bd2c0f7b2cadac538a0a9b4c1d637501082450516fc2816097750f926a6f6659573c0bdc23642d46baf3cf4ae2b5c69624eea8141472b805e565c0cd3ea43d8c26f2af31eda5fc62c5fb20193d62d01e2ee0e0ea3b85c1f332e2c0513868a4cdd238868be9d6afbd75", 0xbc, 0x2, 0x401}, {&(0x7f0000000180)="ba0f64ecbed7ee0d87786bfc2bd5bcc113e06e47", 0x14, 0x1, 0xfff8000000000000}], 0x3a0000) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c) 22:25:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x41) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000001780)}], 0x1, 0x2) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x6, 0x25, 0x0, 0x0, 0x0, 0x7}) rt_sigsuspend(&(0x7f0000000300), 0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname(r2, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x80) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x0, 0x4000000000008, r0, &(0x7f0000000380)='./file1\x00') r4 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) write$evdev(r4, &(0x7f0000000680)=[{}], 0x18) fcntl$setsig(r1, 0xa, 0x13) syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) unshare(0x40000000) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1) 22:25:18 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000), 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000012000902000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000aa317e14000004001200000001000000000000000000"], 0x24}}, 0x0) 22:25:18 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="30f164a68c278541d404d3ecf71684982335855caf5ebaa07f9ad4acce1bece67f9c3c575ca8cdfc465327b23edcd7af09d37fbbab40349f360dec856d3dab07c5bac38e993a49ba63cd5e23efaf911d435f82359f8cdeb8227a47ff5f00ab7487f7bbda6d79338a0bc6268b1a56ad433e30f89efd198fa291d3a16172ff9e3bfe340471aa8b8af19e03faa5d505279e184a410eda2b22ead034c7a2e67a5352e33f964a17f5947d34c95015f340f5ff65d34d37880bdb513a5a3e6fff951e1901b41a", 0xc3, 0x4, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000800)={'nr0\x00', 0x200}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000580)=@hopopts={0x1d, 0x17, [], [@generic={0x8, 0xb8, "c6f1e981d0a0059f61e0624f59426ac1937726187e2343754e0ca530b87b7bca76417ca7a9d100208cf95fa075c7a6b0ba7d96c0a986b223b99bddf3d9c0d19792bb3333ea30bd5b5efcc0761016e58d704d9e0cc984a6bd00c0c9f3fb1614ca787e24a2b6c879416ab51c9d07d2b3dafff3f85fece80933900db45861546bf92f549af29849d7763d35cd3594cb02eb68825cd9830e9818cf4b3fe4f886177f104f84d84c2cdc021842777a792dee3d3353a165694cd9b1"}]}, 0xc8) write(r0, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) mq_unlink(&(0x7f0000000500)='%\x00') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000900)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000840)) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 22:25:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000006c0), 0x1000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) restart_syscall() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8060, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) 22:25:18 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000bc0)='/dev/input/mice\x00', 0x0, 0x20001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000c00)={'filter\x00', 0xec, "ef69c3f02b594ba30cdfeca5955fa11d19d60f7f203dad25a56a73036a1c4e2fa87160f5975ab047651f0e755857b30cba770e5436e7f8e76bca68f2fac23f7dab174faaecefc55d16127957dca1a0f6e818bb32fe733125ca1111123623311b891a39b37b90b8da4cd31cf88fe7890a0abe2126d5575784b2bb62361e4b8705f59c6b62a465f65127d62dc80061cc5a921be628287e6f7c87a55871b58bc3703692df5d2791f35d56222f0926d85d9fe709d97595da959f8b67283bf7d8abf2a7ea63d091c2b63c1430b69f943fde02785e7486c36e178c493b6b5376e15a0bfa4fd57bad5d867d37a841da"}, &(0x7f0000000d40)=0x110) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000480)=r2) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000003c0)={0x9, 0x0, 0x5, 0x9, 0x1, [{0x10001, 0x5, 0x1, 0x0, 0x0, 0x608}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r6 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) fcntl$setpipe(r6, 0x407, 0x122) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000440)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000700)=""/169) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f00000000c0)=0x54) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000200)=0x3, 0x4) set_tid_address(&(0x7f0000000540)) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) r10 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000009c0)="64ec5ad83b56daa30bc7175daf8b26a4d30ce64c947cb9736a7d06112904822dccd93677a0fc2b5cfa35e83dc04c09689cbc459be9bd545464150ae889261b5277dc69016f3a233454ab952cb2c55cc00b72f4b2a213c99e8af858", 0x5b, 0xffffffffffffffff) keyctl$get_security(0x11, r10, &(0x7f0000000a40)=""/206, 0xce) ppoll(&(0x7f0000000600)=[{r8, 0x220}, {r5, 0x480}, {r8, 0xc096}, {r4, 0x200}, {r1, 0x4}, {r3, 0x8000}, {r6, 0x1000}, {r6, 0x4350}, {r7, 0x18c}], 0x9, &(0x7f0000000140)={0x77359400}, &(0x7f00000006c0), 0x2) ioctl$RTC_UIE_OFF(r1, 0x7004) 22:25:18 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 218.446090] FAT-fs (loop5): bogus number of reserved sectors 22:25:18 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='vmnet1+)eth1\\nodevvmnet0\x00', 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000001180)=""/138, 0x8a}, {&(0x7f0000001340)=""/237, 0xed}, {&(0x7f0000001640)=""/231, 0xe7}], 0x3, 0x0) fcntl$setsig(r0, 0xa, 0x41) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x5, 0x2000000200001) memfd_create(&(0x7f0000000100)='\x00', 0x2) openat$cgroup(r0, &(0x7f0000001880), 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000001840)) syz_read_part_table(0x0, 0x1, &(0x7f0000001a00)=[{&(0x7f0000001a40)}]) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) 22:25:18 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = dup3(r0, r0, 0x80000) write$P9_RGETLOCK(r3, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x1, 0x5, 0x1582, r1}}, 0x1e) setreuid(r2, r2) creat(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) [ 218.486166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 218.486188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 218.486698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 218.486715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 218.516459] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. [ 218.617250] IPVS: Creating netns size=2536 id=21 [ 218.652690] FAT-fs (loop5): Can't find a valid FAT filesystem [ 218.702710] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 218.711447] FAT-fs (loop4): Filesystem has been set read-only [ 218.746307] IPVS: Creating netns size=2536 id=22 [ 218.815317] IPVS: Creating netns size=2536 id=23 [ 218.829785] pktgen: kernel_thread() failed for cpu 0 [ 218.835136] pktgen: Cannot create thread for cpu 0 (-4) [ 218.840599] pktgen: kernel_thread() failed for cpu 1 [ 218.845699] pktgen: Cannot create thread for cpu 1 (-4) [ 218.851089] pktgen: Initialization failed for all threads 22:25:19 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x200, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001a40)='/selinux/checkreqprot\x00', 0x4820c0, 0x0) socketpair(0x11, 0x80000, 0x9, &(0x7f0000001ac0)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000001a80)=0x101, 0x8e4f7fbc81372bad) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/117) getsockname(r1, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80) 22:25:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x40, 0x0) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00000000000000fbff000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000280)={0x8, 0x6}) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 22:25:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:19 executing program 7: r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000380)=""/113, &(0x7f0000000240)=0x71) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @rand_addr}, &(0x7f0000000180)=0xc) connect(r0, &(0x7f00000001c0)=@hci={0x1f, r1, 0x3}, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x40, 0x0) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) poll(&(0x7f0000000280)=[{r0, 0x400}, {r2, 0x2}, {r0, 0x8002}, {r2}, {r0, 0x1}, {r2, 0x40}, {r2, 0x4440}], 0x7, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/175) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000040)=""/139) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@local, @dev={0xfe, 0x80, [], 0x1e}, @loopback, 0x7f, 0x1, 0xffffffff, 0x100, 0x81, 0x8, r1}) 22:25:19 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="30f164a68c278541d404d3ecf71684982335855caf5ebaa07f9ad4acce1bece67f9c3c575ca8cdfc465327b23edcd7af09d37fbbab40349f360dec856d3dab07c5bac38e993a49ba63cd5e23efaf911d435f82359f8cdeb8227a47ff5f00ab7487f7bbda6d79338a0bc6268b1a56ad433e30f89efd198fa291d3a16172ff9e3bfe340471aa8b8af19e03faa5d505279e184a410eda2b22ead034c7a2e67a5352e33f964a17f5947d34c95015f340f5ff65d34d37880bdb513a5a3e6fff951e1901b41a", 0xc3, 0x4, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000800)={'nr0\x00', 0x200}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000580)=@hopopts={0x1d, 0x17, [], [@generic={0x8, 0xb8, "c6f1e981d0a0059f61e0624f59426ac1937726187e2343754e0ca530b87b7bca76417ca7a9d100208cf95fa075c7a6b0ba7d96c0a986b223b99bddf3d9c0d19792bb3333ea30bd5b5efcc0761016e58d704d9e0cc984a6bd00c0c9f3fb1614ca787e24a2b6c879416ab51c9d07d2b3dafff3f85fece80933900db45861546bf92f549af29849d7763d35cd3594cb02eb68825cd9830e9818cf4b3fe4f886177f104f84d84c2cdc021842777a792dee3d3353a165694cd9b1"}]}, 0xc8) write(r0, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) mq_unlink(&(0x7f0000000500)='%\x00') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000900)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000840)) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 22:25:19 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x0, 0x6) sendto$inet6(r0, &(0x7f00000000c0), 0x300, 0x0, &(0x7f0000000080)={0xa, 0x4, 0xf, @mcast2}, 0x1c) [ 219.227232] FAT-fs (loop5): bogus number of reserved sectors [ 219.238398] FAT-fs (loop5): Can't find a valid FAT filesystem 22:25:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) [ 219.296258] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 219.354499] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 219.402678] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.415073] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.415137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8242 sclass=netlink_route_socket pig=14892 comm=syz-executor0 [ 219.528591] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 219.536072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.543482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 219.550845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.558444] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 219.558566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.558784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.559020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.559228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.613571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14641 sclass=netlink_route_socket pig=14904 comm=syz-executor0 [ 219.630246] FAT-fs (loop4): Filesystem has been set read-only [ 219.943708] pktgen: kernel_thread() failed for cpu 0 [ 219.948848] pktgen: Cannot create thread for cpu 0 (-4) [ 219.956650] pktgen: kernel_thread() failed for cpu 1 [ 219.961932] pktgen: Cannot create thread for cpu 1 (-4) [ 219.967310] pktgen: Initialization failed for all threads [ 220.098029] pktgen: kernel_thread() failed for cpu 0 [ 220.103387] pktgen: Cannot create thread for cpu 0 (-4) [ 220.108925] pktgen: kernel_thread() failed for cpu 1 [ 220.114825] pktgen: Cannot create thread for cpu 1 (-4) [ 220.120208] pktgen: Initialization failed for all threads [ 220.532114] pktgen: kernel_thread() failed for cpu 0 [ 220.537283] pktgen: Cannot create thread for cpu 0 (-4) [ 220.543088] pktgen: kernel_thread() failed for cpu 1 [ 220.548248] pktgen: Cannot create thread for cpu 1 (-4) [ 220.553667] pktgen: Initialization failed for all threads 22:25:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:20 executing program 7: r0 = userfaultfd(0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400901, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 22:25:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240), &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc213f5e29", 0x3a, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x40, 0x0) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00000000000000fbff000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000280)={0x8, 0x6}) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 22:25:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:20 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000bc0)='/dev/input/mice\x00', 0x0, 0x20001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000c00)={'filter\x00', 0xec, "ef69c3f02b594ba30cdfeca5955fa11d19d60f7f203dad25a56a73036a1c4e2fa87160f5975ab047651f0e755857b30cba770e5436e7f8e76bca68f2fac23f7dab174faaecefc55d16127957dca1a0f6e818bb32fe733125ca1111123623311b891a39b37b90b8da4cd31cf88fe7890a0abe2126d5575784b2bb62361e4b8705f59c6b62a465f65127d62dc80061cc5a921be628287e6f7c87a55871b58bc3703692df5d2791f35d56222f0926d85d9fe709d97595da959f8b67283bf7d8abf2a7ea63d091c2b63c1430b69f943fde02785e7486c36e178c493b6b5376e15a0bfa4fd57bad5d867d37a841da"}, &(0x7f0000000d40)=0x110) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000480)=r2) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000003c0)={0x9, 0x0, 0x5, 0x9, 0x1, [{0x10001, 0x5, 0x1, 0x0, 0x0, 0x608}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r6 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) fcntl$setpipe(r6, 0x407, 0x122) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000440)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000700)=""/169) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f00000000c0)=0x54) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000200)=0x3, 0x4) set_tid_address(&(0x7f0000000540)) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) r10 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000009c0)="64ec5ad83b56daa30bc7175daf8b26a4d30ce64c947cb9736a7d06112904822dccd93677a0fc2b5cfa35e83dc04c09689cbc459be9bd545464150ae889261b5277dc69016f3a233454ab952cb2c55cc00b72f4b2a213c99e8af858", 0x5b, 0xffffffffffffffff) keyctl$get_security(0x11, r10, &(0x7f0000000a40)=""/206, 0xce) ppoll(&(0x7f0000000600)=[{r8, 0x220}, {r5, 0x480}, {r8, 0xc096}, {r4, 0x200}, {r1, 0x4}, {r3, 0x8000}, {r6, 0x1000}, {r6, 0x4350}, {r7, 0x18c}], 0x9, &(0x7f0000000140)={0x77359400}, &(0x7f00000006c0), 0x2) ioctl$RTC_UIE_OFF(r1, 0x7004) 22:25:20 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="30f164a68c278541d404d3ecf71684982335855caf5ebaa07f9ad4acce1bece67f9c3c575ca8cdfc465327b23edcd7af09d37fbbab40349f360dec856d3dab07c5bac38e993a49ba63cd5e23efaf911d435f82359f8cdeb8227a47ff5f00ab7487f7bbda6d79338a0bc6268b1a56ad433e30f89efd198fa291d3a16172ff9e3bfe340471aa8b8af19e03faa5d505279e184a410eda2b22ead034c7a2e67a5352e33f964a17f5947d34c95015f340f5ff65d34d37880bdb513a5a3e6fff951e1901b41a", 0xc3, 0x4, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000800)={'nr0\x00', 0x200}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000580)=@hopopts={0x1d, 0x17, [], [@generic={0x8, 0xb8, "c6f1e981d0a0059f61e0624f59426ac1937726187e2343754e0ca530b87b7bca76417ca7a9d100208cf95fa075c7a6b0ba7d96c0a986b223b99bddf3d9c0d19792bb3333ea30bd5b5efcc0761016e58d704d9e0cc984a6bd00c0c9f3fb1614ca787e24a2b6c879416ab51c9d07d2b3dafff3f85fece80933900db45861546bf92f549af29849d7763d35cd3594cb02eb68825cd9830e9818cf4b3fe4f886177f104f84d84c2cdc021842777a792dee3d3353a165694cd9b1"}]}, 0xc8) write(r0, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) mq_unlink(&(0x7f0000000500)='%\x00') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000900)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000840)) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 22:25:20 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001b40)='/selinux/mls\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000001900)=[{&(0x7f00000007c0)="ff14a740dc9cfa8353d552c3ee1874cb17a6e0686f0c1881cf8e36fdd5a50ca9ed44c04c59d126c31527c11353dde4cd8ec379f21a5c2ec72e2aa8c57ca5391831ee6d3107d8eeaaae48d33fdbbf646be93cd3e3d8c69d9fcc8026163cdb559c16c8f992e1de14f7e89b15ee70168a456f6dc5a984d7", 0x76}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="93c6568ee7f90542eafc1d3f20805fd334951acf7e93c7e5056c487715c5afc1c6cdca7b8b841d89f92bef3942febae402e7c498b50470cfb182ab5ad871d4d966282464920d57f304fa8e171a60bed8b112b1f4c5ff646a99bc32358447f16f720dba307325d126129a06c842a6c2610c080e4cbf0070d0927026ee96e88d57d38a7c41ffd74ed8989c23a1952541", 0x8f}], 0x3, 0x4) r1 = socket$inet6(0xa, 0x200000005, 0x6) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = memfd_create(&(0x7f0000000480)=',,/\'\x00', 0x1) r3 = dup2(r1, r1) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(r4, &(0x7f0000000380)=""/200, 0xc8, 0x2, &(0x7f0000000300)={0x0, 0x1c9c380}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/create\x00', 0x2, 0x0) unshare(0x40000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$TIOCNXCL(r4, 0x540d) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000640)={'filter\x00'}, &(0x7f0000000180)=0x2a) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000500)) recvfrom(r6, &(0x7f0000000540)=""/144, 0x90, 0x20, &(0x7f00000006c0)=@ax25={0x3, {"cddaa6d69e0efa"}, 0x100}, 0x80) ioctl$VT_WAITACTIVE(r3, 0x5607) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0x54) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffe}, 0x0, 0x8) ftruncate(r7, 0x8220) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001940)="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") getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000780)={'team0\x00', r8}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") 22:25:20 executing program 7: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)="636c6561725f72656673000e26f4219411c8d7870771d49f76") getpgrp(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000140)="736368656473746174007175ffaed85ef4c646fec2ac4f5df9449c1cf5efa7272d") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x2, "2208fbfd03f6d00d", "385e14c7f9c844fe556de11eea0de58afc5b2e2277d2da8cc41b4fa062741c44"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4}, &(0x7f0000000240)={0x5}, &(0x7f0000000280), &(0x7f00000006c0)={0x77359400}, &(0x7f0000001b00)={&(0x7f0000000740), 0x8}) sendfile(r2, r4, &(0x7f0000000700), 0x1) fstat(0xffffffffffffffff, &(0x7f0000000300)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xc93, 0x0, 0x7, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}) read(0xffffffffffffffff, &(0x7f0000000140)=""/11, 0xb) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x9f, 0x0, 0x9, 0x7fffffff, 0x100000000, 0x0, "89a0d899dc5833fcb54eb57240a8728dc543f18395f9b2b729a74df50d970b0830d9304bcf446299e976f38c11b707c96addc109665c30d65b93a13d8c98336e533dd23898ec30d7a1e56e3e3368bb7a2227610f6e1c484d1bc3f3a4b4e75140c7a2f394dbd236fb0ef41abff498794e5e269560dc1ab039851cb0ad3c990c503f21500ed9d88ecbb71df1db637073802d3216f7820798ede181a75b6a5642"}, 0x1b7) alarm(0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x985}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040091}, 0x20000801) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) accept(r0, &(0x7f0000000600)=@hci, &(0x7f0000000180)=0x80) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000003c0)={0x20, 0x1, 0xd1, 0x4, 0x3}, 0xc) r6 = socket(0x18, 0x0, 0x1) connect(r6, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) 22:25:20 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80000001, 0x200801) write$P9_RLERROR(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0800850207010001002f"], 0xfffffebe) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)=':$[\x00'], &(0x7f0000000400)=[&(0x7f00000001c0)='@ppp0vmnet1vboxnet0.\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='proceth1\x00', &(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='posix_acl_access\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/input/event#\x00', &(0x7f0000000380)='/dev/input/event#\x00', &(0x7f00000003c0)='/dev/input/event#\x00'], 0x100) r2 = socket(0x800000000000018, 0x0, 0x1000000000000001) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480)) setsockopt(r2, 0x400000000000111, 0x3, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 22:25:20 executing program 7: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000080)=""/89, 0x59}], 0x2, 0x1) 22:25:21 executing program 7: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x80) r1 = socket$inet6(0xa, 0x1, 0xffffffffffffffff) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x8000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000180)) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) getsockname$unix(r2, &(0x7f0000000200), &(0x7f00000002c0)=0x6e) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)='security.capabimity\x00', 0x1a, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x80, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0) 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:21 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e20, 0x4}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="5faf827d1cb60fecd1e05248b970b58fb99ae1229266a0a1b3b6da58890277ffb5080a2c92fccbf4a0206801e97173211e97a35887dc766a5a8743002c774ac5c299419045d18f2ca0e71e90a83ebdefdf"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x3) pkey_free(0xffffffffffffffff) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 221.370993] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) [ 221.518878] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 221.583653] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 221.598204] FAT-fs (loop4): Filesystem has been set read-only [ 221.667932] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:25:21 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 221.811695] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 221.819637] FAT-fs (loop4): Filesystem has been set read-only [ 221.839850] pktgen: kernel_thread() failed for cpu 0 [ 221.845498] pktgen: Cannot create thread for cpu 0 (-4) [ 221.855004] pktgen: kernel_thread() failed for cpu 1 [ 221.860214] pktgen: Cannot create thread for cpu 1 (-4) [ 221.867243] pktgen: Initialization failed for all threads [ 222.247621] pktgen: kernel_thread() failed for cpu 0 [ 222.252864] pktgen: Cannot create thread for cpu 0 (-4) [ 222.258255] pktgen: kernel_thread() failed for cpu 1 [ 222.263500] pktgen: Cannot create thread for cpu 1 (-4) [ 222.268859] pktgen: Initialization failed for all threads [ 222.402752] pktgen: kernel_thread() failed for cpu 0 [ 222.407892] pktgen: Cannot create thread for cpu 0 (-4) [ 222.416605] pktgen: kernel_thread() failed for cpu 1 [ 222.422339] pktgen: Cannot create thread for cpu 1 (-4) [ 222.427701] pktgen: Initialization failed for all threads [ 222.552337] pktgen: kernel_thread() failed for cpu 0 [ 222.557454] pktgen: Cannot create thread for cpu 0 (-4) [ 222.563238] pktgen: kernel_thread() failed for cpu 1 [ 222.568446] pktgen: Cannot create thread for cpu 1 (-4) [ 222.573831] pktgen: Initialization failed for all threads [ 227.236826] IPVS: Creating netns size=2536 id=24 [ 227.408397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.422809] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 227.478472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 227.492490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 227.549509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.564087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 227.578086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.593098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.246883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 228.280761] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 228.286917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.294531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:25:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:28 executing program 3: ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={"627269616765300200000400de00", {0x2, 0x0, @loopback}}) r0 = socket$inet6(0xa, 0x2, 0x100000001) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) eventfd(0xc2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x0, @remote, 0x4}, {0xa, 0x4e24, 0xb0b, @mcast2, 0xe726}, 0x2, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x5c) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f0000000140)=0x30) prctl$setmm(0x23, 0x7, &(0x7f00000a9000/0xe000)=nil) 22:25:28 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x0, 0x177}, 'port1\x00'}) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0xfffffffffffffffd, 0x3, {0x0, 0x2, 0x101, 0x2, 0x1}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@dev={[], 0xa}, @random="843c5c40c96f", @random="5fec8a3f2dac"]}) 22:25:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:28 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="30f164a68c278541d404d3ecf71684982335855caf5ebaa07f9ad4acce1bece67f9c3c575ca8cdfc465327b23edcd7af09d37fbbab40349f360dec856d3dab07c5bac38e993a49ba63cd5e23efaf911d435f82359f8cdeb8227a47ff5f00ab7487f7bbda6d79338a0bc6268b1a56ad433e30f89efd198fa291d3a16172ff9e3bfe340471aa8b8af19e03faa5d505279e184a410eda2b22ead034c7a2e67a5352e33f964a17f5947d34c95015f340f5ff65d34d37880bdb513a5a3e6fff951e1901b41a", 0xc3, 0x4, &(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000800)={'nr0\x00', 0x200}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000580)=@hopopts={0x1d, 0x17, [], [@generic={0x8, 0xb8, "c6f1e981d0a0059f61e0624f59426ac1937726187e2343754e0ca530b87b7bca76417ca7a9d100208cf95fa075c7a6b0ba7d96c0a986b223b99bddf3d9c0d19792bb3333ea30bd5b5efcc0761016e58d704d9e0cc984a6bd00c0c9f3fb1614ca787e24a2b6c879416ab51c9d07d2b3dafff3f85fece80933900db45861546bf92f549af29849d7763d35cd3594cb02eb68825cd9830e9818cf4b3fe4f886177f104f84d84c2cdc021842777a792dee3d3353a165694cd9b1"}]}, 0xc8) write(r0, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) mq_unlink(&(0x7f0000000500)='%\x00') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000900)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000840)) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000007c0)) 22:25:28 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000bc0)='/dev/input/mice\x00', 0x0, 0x20001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000c00)={'filter\x00', 0xec, "ef69c3f02b594ba30cdfeca5955fa11d19d60f7f203dad25a56a73036a1c4e2fa87160f5975ab047651f0e755857b30cba770e5436e7f8e76bca68f2fac23f7dab174faaecefc55d16127957dca1a0f6e818bb32fe733125ca1111123623311b891a39b37b90b8da4cd31cf88fe7890a0abe2126d5575784b2bb62361e4b8705f59c6b62a465f65127d62dc80061cc5a921be628287e6f7c87a55871b58bc3703692df5d2791f35d56222f0926d85d9fe709d97595da959f8b67283bf7d8abf2a7ea63d091c2b63c1430b69f943fde02785e7486c36e178c493b6b5376e15a0bfa4fd57bad5d867d37a841da"}, &(0x7f0000000d40)=0x110) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000480)=r2) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000003c0)={0x9, 0x0, 0x5, 0x9, 0x1, [{0x10001, 0x5, 0x1, 0x0, 0x0, 0x608}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r6 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) fcntl$setpipe(r6, 0x407, 0x122) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000440)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000700)=""/169) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f00000000c0)=0x54) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000200)=0x3, 0x4) set_tid_address(&(0x7f0000000540)) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) r10 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000009c0)="64ec5ad83b56daa30bc7175daf8b26a4d30ce64c947cb9736a7d06112904822dccd93677a0fc2b5cfa35e83dc04c09689cbc459be9bd545464150ae889261b5277dc69016f3a233454ab952cb2c55cc00b72f4b2a213c99e8af858", 0x5b, 0xffffffffffffffff) keyctl$get_security(0x11, r10, &(0x7f0000000a40)=""/206, 0xce) ppoll(&(0x7f0000000600)=[{r8, 0x220}, {r5, 0x480}, {r8, 0xc096}, {r4, 0x200}, {r1, 0x4}, {r3, 0x8000}, {r6, 0x1000}, {r6, 0x4350}, {r7, 0x18c}], 0x9, &(0x7f0000000140)={0x77359400}, &(0x7f00000006c0), 0x2) ioctl$RTC_UIE_OFF(r1, 0x7004) 22:25:28 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(r0, &(0x7f00000002c0)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') accept$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) accept$packet(r2, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001b00)=0x14) accept(r2, &(0x7f0000001b40)=@ll={0x11, 0x0, 0x0}, &(0x7f0000001bc0)=0x80) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000001c40)={@empty, 0x0}, &(0x7f0000001c80)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001cc0)={@remote, @remote, 0x0}, &(0x7f0000001d00)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000001d40)={@remote, 0x0}, &(0x7f0000001d80)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001dc0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000001e00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001e40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000001f40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001f80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003600)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000003640)={0x11, 0x0, 0x0}, &(0x7f0000003680)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000036c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000037c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003800)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004e00)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004f00)={0x0, @empty, @broadcast}, &(0x7f0000004f40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004f80)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000005080)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000008180)={0x0, @multicast1, @multicast2}, &(0x7f00000081c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000008a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000089c0)={&(0x7f0000008200)={0x78c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x268, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1b0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x13c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffe68b}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r19}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x72b}}, {0x8, 0x6, r21}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) fchown(r1, r22, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r23 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r23, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r23, &(0x7f00000092c0), 0x4ff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x7a00, &(0x7f0000000000)) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x4000, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xa073, r24, 0x0) sendmsg$nl_route(r25, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8}]}, 0x30}}, 0x0) [ 228.589259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8242 sclass=netlink_route_socket pig=15395 comm=syz-executor0 22:25:28 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x0, 0x177}, 'port1\x00'}) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0xfffffffffffffffd, 0x3, {0x0, 0x2, 0x101, 0x2, 0x1}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@dev={[], 0xa}, @random="843c5c40c96f", @random="5fec8a3f2dac"]}) 22:25:28 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x14001, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x20, 0x5, 0x8000, {r1, r2+30000000}, 0x4, 0x9}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) 22:25:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) ioctl(r0, 0x2, &(0x7f0000000040)="ed1787ae454fadc3e6a1f743e68e687985dcd663d99dfd0efd815ef9548ea69eeb879fc265048e581f6b986ec29a4557a40c9417cdd79c45f42785a534372ccfead1ef9c0be2630b7d12d9f1e7e148269dfcf54c88f5a6e99a2e8f539d1bcfcfbae1ffdd4ccc38200d527908f0731c80167463bc843b19152748ab5ff003c4ed9cc9e12e7af2a8c1d3a26e24d5d8ef251a674cf8734a74c43cf6bc370bce5eac9b330614d9500d196a34a701fb9d134f1bdb8e1b789c72e8") bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) 22:25:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 228.729651] IPVS: Creating netns size=2536 id=25 22:25:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x8, {{0x2, 0x4e23, @remote}}}, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x87, @loopback, 0x4e23, 0x3, 'sh\x00', 0x1, 0x4, 0x20}, 0x2c) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000140)={0xfc, 0x5, 0x1, 0x2}, 0x10) ioctl$KDENABIO(r0, 0x4b36) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0x114, {0x57, 0xfffffffffffffffc, 0xcf, {0x80000001, 0x5}, {0x2, 0xc8f}, @period={0x5d, 0x6, 0x419, 0xfff, 0x6, {0x1ff, 0x10000, 0x8e8, 0xfffffffffffffff7}, 0x4, &(0x7f0000000180)=[0x9, 0x3, 0x5, 0x0]}}, {0x57, 0x4, 0x7, {0x9, 0x46}, {0x7ca, 0x400}, @cond=[{0x3f, 0x10000, 0x5, 0x5, 0x8, 0x1}, {0x8001, 0x2, 0xffff, 0x7, 0x32, 0x8}]}}) syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x3a66, 0x6, &(0x7f0000001740)=[{&(0x7f00000002c0)="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", 0x1000, 0xffffffffffffffe1}, {&(0x7f00000012c0)="ca952c88c0069d8490897f34e7503e212a3f546d86e86a310e12273d334c4534941669fc4384f5dd74e3b912a077f644e56a565f791b1975b8f4aaac02de6161d0229bee4dd62f3812429be7c3328b2f9cd632d3c454a61b664b983ace6e89c5651add6ba8271d162d71ec25e388f5680a22f4eb342094775c6b2b2af2fc5f39f54b828c2e499d76a27de86331b64726", 0x90, 0xfc1}, {&(0x7f0000001380)="8ce5fb2f11a0f44bc91d9ba74e0804b488697e0421fc9556b04e139a89c78023ae46ed37243bed8528ab8e4b2f9eb32d3ad217dfeacf21a9c5def7d37bfbf81463279f1050cebe81fac12daed26a8d766f6b16ccf25505b0dc8b59e35ab6a7bb3eb000a88fecc032e38df7ae9cb03054c44f980c795304c31c6e746656a3b848448000396070f6a4089962e6cd63c6952f93e38666b1a4324ed1cc09abf8bf46e72d7c25ae3770771a7cbbf20b35f9e7b0e9d1f0ac5a343f64c99ee02bf04d0e066b4198170692969a27a85187d9ff514854d7d5", 0xd4, 0x5}, {&(0x7f0000001480)="58fc97895c544468853e791919c7e9757d454de514c926c07560f8f835541ecf37c280aa6663faf5b899cb082e98c42e09d324cb8e5a562f736e63053df68778190e262da2f013e05c47465be446a024b0bc64f3e7e3b6e1ae5ba1267d02323f1a5fae828f0b6f75f0cfb2e48c65b21bdb70d4568e357f490fd5c3103f8509a4d0c4ecd8d725f0ed876090a1a41ed482177380a91080a0a91751eed138764d269646f3a8e7148a5e0305e06a521286628fa317816ff45a55baa0fc2edad87c88c888fa9564a2d5d7ca3d340dfc7704c0d2b8cf2c5e6388f95167aa773c015a6934ec46e5f623f0b0d324dc3d24c96ced89a57db081d78e3b5291d63830d2eb", 0xff, 0x1}, {&(0x7f0000001580)="11798688231aa74eb2bd9643ddf275fd3f0e5708fc34befe831e48ef985ec29e0873d3c354c159c858f00c1d0df1b8bda9ffe1b9ea24fba505ca97f35d793f32daf391fee1f8296a58d3f320412c3c5b14dc38c3e43dae66063b8b59d150dc4f530fe1d4aabadb1bc985be6d64fd24250df3d3a6a617d986438833374ec5b92a1a1a7a792175b85b08a3a54b1ecdf08c608e6ef1a85c25f8556ce81da03b00ccbfc78de03b8ddb566122db71c6e5a7d621e6a23dedd4011418f07d350b9f1095d21bfa650b6ebbafd499a9379bf2880cd40eeca4bd933abed8025da32d6e76e89c1489a2e1536aaa", 0xe8, 0x7}, {&(0x7f0000001680)="763abb7388bd4d77e1004037e054df4935f8c5578e75b302cddd386b4ded7bf4824d17a45d0deed4beda9c848a9feed6b1bbe46d8a7cb733a4361900da3aface58aa4ef144c36faef5982d228fec48fe3fc7c4144079d0f1b7923f2c72e97a3679917a2eca66719b947d04582cf0b7ca88919f7c61763dfe56764f7cb8d1a7b764a576148442cca3f0303998bc80ee0f64881f02ac6d72af45724a71", 0x9c, 0xf3da}], 0x3001000, &(0x7f0000001800)={[{@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}]}) shutdown(r0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001840)={0x54, 0xcb1, 0x400, 'queue0\x00', 0x8001}) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000001900)="78696d2374caadfcc1954c345f3758935a1ad124d67ef789452cdb90b38ce1f84526990c79848bc519768e9eb7caf386a3c7846c61b829531b112f71e1dca559c134d5e711582422ef6f9a41fcd035de5d56426f1b341544debff1272f6fa6908334c680e0c47b9affc569a0acd3bf051bac3469f87f1656ff67d2500922897d47da03a4321f8a0a01b7ed8019ea463a9a9b09e32dc8c89ff6855dabfbfcda94986b512f69566d1949d7d804256c482046b5c972a7cc0d87", 0xb8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000019c0)="64ef819b4d2d07114870e106910c81d6a0fde0afa783bdd804cff2e66b47a725d3eff55ee276f3647520a35d7dd463480da139436e82a6193d7d88ca58a4effa6a1ab3c48c47618f954d45e276b6e45ec4873a14012b3b6bb23ea95a578cc57b78ba0c25a23ebf172667686b09ee03d3b7ec7eb34fa572675764629fcce3e404d9d3237cf78b454d811c9d2d90b03e03f9cfc8701e2c320e932c2d7cbba9383c0183b0e604d129ce80a04592da8f35e39c0563f71a7fef23bc12e181ad14f7e5708c7d9ff1446ee5741bd41de65af5cb3455f8277f372f670ea5c23ff487cac53a8a", 0xe2) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000001ac0)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x9c, 0x0, &(0x7f0000001c00)=[@register_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x40, 0x20, &(0x7f0000001b00)=[@fda={0x66646185, 0x3, 0x2, 0x39}, @fda={0x66646185, 0x0, 0x4, 0x2}], &(0x7f0000001b40)=[0x30, 0x38, 0x38, 0x30]}, 0x9}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000001b80), &(0x7f0000001bc0)=[0x58, 0x28, 0x18]}, 0x3ca}}], 0x34, 0x0, &(0x7f0000001cc0)="00a8c97449938e3f0fd635f365953c48d84836c3069316b0f3e43450c30ca7711daa384b6e4928a7711d43931d1bedc85bc88b65"}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001d40)='dummy0\x00', 0x10) fcntl$setsig(r0, 0xa, 0x1) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000001d80)={0x2, 0x8, {0x51, 0x67, 0x80, {}, {0x2, 0x4}, @cond=[{0xed8e, 0x8000, 0x1f, 0x3, 0xff, 0x6}, {0x80000000, 0x6, 0x1, 0x8, 0x2, 0x200}]}, {0x56, 0x5, 0x6, {0xa1, 0x401}, {0x8cca, 0x9}, @rumble={0x25f, 0x100}}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$RTC_VL_CLR(r0, 0x7014) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001e00)=0x3, 0x4) poll(&(0x7f0000001e40), 0x0, 0x101) getresuid(&(0x7f0000001e80)=0x0, &(0x7f0000001ec0), &(0x7f0000001f00)) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) shutdown(r0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001f40)={{{@in=@multicast1, @in=@rand_addr}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000002040)=0xe8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002080)='vcan0\x00', 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/zero\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000002100)={0x1, 0x3, 0x4, 0x2, 0x2, 0x200, 0x5, 0xfffffffffffffffe, 0x9, 0xffffffffffffffe0}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000002140), 0x4) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000002180)) accept4$inet(r2, 0x0, &(0x7f00000021c0), 0x800) 22:25:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}, {&(0x7f0000002480)=""/192, 0xc0}], 0x7, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:28 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}, {&(0x7f00000023c0)=""/146, 0x92}], 0x6, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/77, 0x4d}], 0x5, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 229.179851] IPVS: Creating netns size=2536 id=26 22:25:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) 22:25:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x31, &(0x7f000059dffc), &(0x7f0000000140)=0x205) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 229.331740] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.347370] FAT-fs (loop4): Filesystem has been set read-only 22:25:29 executing program 1: lsetxattr(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000140)='*\x00', 0x2, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x201, 0x0) getpeername$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1f, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x9, 0x321}, 0x1c) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) 22:25:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0x0, 0x5, {0x7}}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) ioctl(r0, 0x7fe, &(0x7f0000000080)="95d1aef8a2267aafaad8a525ca485d3021b0ef120ece1b09cc71621f1690275059967d8e4b") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) connect$netlink(r2, &(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000040)={0x100, 0x3a78000, 0x7, 0x1, 0x2, 0xa0d, 0x2, 0x10001, 0x57, 0x80, 0x7, 0x1e}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) 22:25:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:29 executing program 7: socketpair(0x0, 0x2000000002000004, 0x6, &(0x7f0000000040)) 22:25:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:29 executing program 5: r0 = dup(0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "648f7bc438e54733b7c59b8624d906da6615591dc13bb583cda05f7d71ca63"}, 0x2f) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @multicast1}, &(0x7f0000000480)=0xc) 22:25:29 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6f73785b2f1057d521c52a792e636170d462696c69747900"]) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x80000000, 0x8, 0xffff, 0x1, 0x1a000000, 0x80, 0x6, 0xfffffffffffff801, 0x5, 0x0, 0xef, 0x3}) fallocate(r3, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) ioctl$fiemap(r1, 0x40086602, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2]) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e22, @multicast2}}, 0xdf, 0x0, 0x8001, "b78694196e19e5783b277570e086fff95e9cf35d7e4dcec1fb6ff4964ba475b05de87144b27911a71f9d42d6506016e18f044ec4e94d3e19c33d4999433b547c1d67c86b867e89062467e35b70c66bde"}, 0xd8) 22:25:29 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='attr/fscreate\x00') r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x30442d0d}, 0xb) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') sendfile(r3, r4, &(0x7f0000000040), 0x4) 22:25:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88", 0x1d, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:29 executing program 7: socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) pkey_alloc(0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="ae", 0x1, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, r0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000500)=""/134) munmap(&(0x7f0000624000/0x1000)=nil, 0x1000) open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x60, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x8, 0x8000, 0xfffffffffffffffa}) socket$inet6(0xa, 0x1000000000002, 0x0) [ 229.622056] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.629915] FAT-fs (loop4): Filesystem has been set read-only 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280), 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:29 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1f, 0x35, &(0x7f0000000040)="4bf52af5202f22e823b1d3c26519f6ebfa6cae9f1cf18bab75a622f3a48fea50a82f8c6ea83e16456bf644182a37857e319726450c"}) 22:25:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:29 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x595}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) sync_file_range(r1, 0xffffffffffffffff, 0x4, 0x1) 22:25:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:29 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x2, "4bc333b8595a865187089d9bd700000004"}], 0x28}}], 0x2, 0x0) 22:25:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x80000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000500)=[{0xfffffffffffffff8, 0x386a01f7, 0x1, 0x9, @time={r1, r2+10000000}, {0x85b, 0x8000}, {0x8000, 0x80}, @ext={0xe0, &(0x7f00000002c0)="704dae9e1899a3b382e3a93f37af3004f57275c9f3fb3ce963c7e446901edea0371f56d7dfc22de09534479b268190529b74dae45f34234da957bded973899c6e3b5126e8e73b5807900a420d61c3daa12a1a31f9bffcea5a2630b08b16234147ef3a04a4a1b4c9621636ff339755ad8b31d2958fdd13c4e7a3347cd3913b711519f0b71f68b8c3c3629055ecf80b568fad34dbb28b030e1ff651d0c241297b97c27c5c41705881c92e139417da7f42195ae9676958ed517575e252715f7b4fef8dc68cccc7036b133ad29ebde4a0ac872a1a83c4e05d442eff3eda02f8545ed"}}, {0x9, 0xffffffffffffffff, 0x98, 0x7ff, @tick=0xfffffffffffff000, {0x3, 0x831}, {0x400, 0x8001}, @quote={{0x81, 0x80}, 0x78c6, &(0x7f00000003c0)={0x89, 0x5, 0x9bcc, 0x6, @time, {0x2, 0x11a2}, {0x1, 0x1319}, @connect={{0x1, 0xa9}, {0x200}}}}}, {0xd8, 0xffffffff, 0x8, 0x6, @tick=0x6, {0xff, 0x200}, {0x10001, 0x9}, @quote={{0x7, 0x8}, 0x7, &(0x7f0000000400)={0x3c, 0x8000, 0x9, 0x46, @time, {0x8001, 0xffffffffffffffff}, {0x2, 0x401}, @queue={0x1, {0x2, 0x9}}}}}, {0x401, 0x8, 0x9, 0x1000000000000, @time={0x77359400}, {0x5, 0x8000}, {0x7, 0x5}, @ext={0xa2, &(0x7f0000000440)="3f6ea590ecf9899e39d8c6182be13246afd56c09cd01c04eef2afa63c343cf137543405b2f3a22bc5d431866655647a34401e3e72f0c2390090f5755affb305c77fa8f0543a4bdc682f591cbd7cc8876898ff4ffaeb31e6c6cf591968dc1ce242f26f22a22d76e59838002986126bf84a52c589c5edda9a1b6957d129ab8e1ecf70fb379529b824502861b45299a95948093c5c796d9cdc2fbf704226fdd196245d2"}}, {0x800, 0x8001, 0x8, 0x1, @time={0x77359400}, {0x8, 0x3}, {0xd4, 0x3c0}, @raw32={[0x4, 0x20, 0x6]}}, {0x0, 0x4, 0x3, 0x100, @tick=0x7, {0x200, 0xefe}, {0xffffffffffff0000, 0x10001}, @raw32={[0x8000000000, 0x8, 0xa15a]}}], 0x120) clock_gettime(0x7, &(0x7f0000000000)) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000001) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0), 0xffffffffffffffff, 0x0, &(0x7f00006f7000)={r4, r5+30000000}, &(0x7f0000000140)=0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280), 0x1000000) 22:25:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x8, {0x7, 0x1b, 0x494, 0x8040, 0x2228, 0x10001, 0x1, 0x1}}, 0x50) 22:25:29 executing program 2: futex(&(0x7f0000000080), 0x4, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='tracefs\x00', 0x2, &(0x7f0000000300)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) 22:25:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mprotect(&(0x7f000004c000/0x2000)=nil, 0x2000, 0x3000003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000004640)={0x0}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001340)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000240), 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, &(0x7f0000000500)=""/61, 0x3d, 0x7}, 0x1}, {{&(0x7f0000000540)=@ax25, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/97, 0x61}], 0x3, &(0x7f00000008c0)=""/234, 0xea, 0x62}, 0xfffffffffffffffb}], 0x2, 0x100, &(0x7f0000004680)={r1}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'\x00', {0x2, 0x4e20, @rand_addr}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x440, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x6, 0x9, 0x3, 0x9, 0x0, 0x1000, 0x20900, 0x4, 0x9, 0x8, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x5, 0x625, 0x0, 0x0, 0x40, 0x69f61fe6, 0x0, 0x0, 0x6, 0x3, 0xc8de, 0x3, 0x4, 0xf589, 0x6, 0x7cca, 0x100000000, 0x7, 0x7f, 0x0, 0x800, 0x0, 0xffffffffffff0001, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x14000, 0x40, 0xff, 0x6, 0x2, 0x8}, r3, 0xf, r0, 0xa) read(r0, &(0x7f0000000180)=""/158, 0x9e) 22:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000580)=@random={'user.', '\x00'}, &(0x7f00000005c0)='/dev/rfkill\x00', 0xc, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0xffffffffffffff0c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x88202, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={"6c6f1b0000000000000000b7e4904700", @broadcast}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) sync_file_range(r0, 0x80000001, 0x8, 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000004c0)={0x6, 0x0, 0x7f, 0x8, 0xfb1b}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000540)=""/36) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c, 0x80800) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="080000000050c780000000000000010000f692000000000000000000000000000000000000000000000000"]) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 22:25:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:30 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000006c0), 0x2, &(0x7f0000000040)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)='tunl0\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)='tunl0\x00') [ 230.031541] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 230.040725] FAT-fs (loop4): Filesystem has been set read-only 22:25:30 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x1, 0x7fffffff, 0x4) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) 22:25:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88", 0x1d, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000026f000/0x2000)=nil, 0x2000}, &(0x7f00000004c0)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6, 0x9000}, 0x4) acct(&(0x7f0000000600)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r2, &(0x7f0000000340)=""/224, 0x32) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x80000000) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="7a34dd1b6a3b9d106635d20400", @ANYRES16=0x0, @ANYBLOB="080425bd7000fbdbdf250f0000001c0001000800090017000000080006006c630000080008003f0000002000030008000800010000001400060000000000000000000000ffffac1414aa08000400af0000001c0002000800030003000000080007000900000008000500ff0f000008000500c40000001c0001000800080000080000080004004e20000008000b00736970004800020014000100fe800000000000000000000000000018080002004e2300000800030000000000080005000700000008000b000a000000080004003f0000000800050092000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000811) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 22:25:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:30 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc83d6d345f") r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) fcntl$setstatus(r0, 0x4, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x208200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x18) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x5, 0x8aba, 0x1ff, 0x10001, 0x7fffffff}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x3}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfff, "624af7ba5f9d5fc40dc8b83631dc318339c1256b20481335b278eeaa77540ee1"}) [ 230.735600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket pig=15612 comm=syz-executor1 22:25:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mprotect(&(0x7f000004c000/0x2000)=nil, 0x2000, 0x3000003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000004640)={0x0}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001340)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000240), 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, &(0x7f0000000500)=""/61, 0x3d, 0x7}, 0x1}, {{&(0x7f0000000540)=@ax25, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/97, 0x61}], 0x3, &(0x7f00000008c0)=""/234, 0xea, 0x62}, 0xfffffffffffffffb}], 0x2, 0x100, &(0x7f0000004680)={r1}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'\x00', {0x2, 0x4e20, @rand_addr}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x440, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x6, 0x9, 0x3, 0x9, 0x0, 0x1000, 0x20900, 0x4, 0x9, 0x8, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x5, 0x625, 0x0, 0x0, 0x40, 0x69f61fe6, 0x0, 0x0, 0x6, 0x3, 0xc8de, 0x3, 0x4, 0xf589, 0x6, 0x7cca, 0x100000000, 0x7, 0x7f, 0x0, 0x800, 0x0, 0xffffffffffff0001, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x14000, 0x40, 0xff, 0x6, 0x2, 0x8}, r3, 0xf, r0, 0xa) read(r0, &(0x7f0000000180)=""/158, 0x9e) 22:25:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:30 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3e, &(0x7f0000000200)=0x9, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x20) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2}, 0xb) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x1000, &(0x7f0000000240)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)="554a291d651b1c464fb1b3caa28491d60e050f982180a5a52e4899b0f0abd96968a9b3c842fa34ee7722d9014ec6f0d87a0b56ff50ef05171ca6a304e02245a6c92797e10230208c3c991bf7892fc4850947d3be2091810d8a115acdb5e10fcbc24cc4811f8a4c4cbb124d9f7bafb7d89a034aca2b11c24c8e2b9f44ba506f8bf360") umount2(&(0x7f0000000400)='./control/file0\x00', 0x4) close(r0) 22:25:30 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x1, 0x7fffffff, 0x4) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) 22:25:30 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000026f000/0x2000)=nil, 0x2000}, &(0x7f00000004c0)=0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6, 0x9000}, 0x4) acct(&(0x7f0000000600)='./file1\x00') syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r2, &(0x7f0000000340)=""/224, 0x32) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x80000000) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="7a34dd1b6a3b9d106635d20400", @ANYRES16=0x0, @ANYBLOB="080425bd7000fbdbdf250f0000001c0001000800090017000000080006006c630000080008003f0000002000030008000800010000001400060000000000000000000000ffffac1414aa08000400af0000001c0002000800030003000000080007000900000008000500ff0f000008000500c40000001c0001000800080000080000080004004e20000008000b00736970004800020014000100fe800000000000000000000000000018080002004e2300000800030000000000080005000700000008000b000a000000080004003f0000000800050092000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000811) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 22:25:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88", 0x1d, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:31 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mprotect(&(0x7f000004c000/0x2000)=nil, 0x2000, 0x3000003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000004640)={0x0}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001340)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000240), 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, &(0x7f0000000500)=""/61, 0x3d, 0x7}, 0x1}, {{&(0x7f0000000540)=@ax25, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/97, 0x61}], 0x3, &(0x7f00000008c0)=""/234, 0xea, 0x62}, 0xfffffffffffffffb}], 0x2, 0x100, &(0x7f0000004680)={r1}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'\x00', {0x2, 0x4e20, @rand_addr}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x440, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33e) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0x6, 0x9, 0x3, 0x9, 0x0, 0x1000, 0x20900, 0x4, 0x9, 0x8, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x5, 0x625, 0x0, 0x0, 0x40, 0x69f61fe6, 0x0, 0x0, 0x6, 0x3, 0xc8de, 0x3, 0x4, 0xf589, 0x6, 0x7cca, 0x100000000, 0x7, 0x7f, 0x0, 0x800, 0x0, 0xffffffffffff0001, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x14000, 0x40, 0xff, 0x6, 0x2, 0x8}, r3, 0xf, r0, 0xa) read(r0, &(0x7f0000000180)=""/158, 0x9e) 22:25:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3, 0x8001}}, 0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x19}}) 22:25:31 executing program 2: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000180)=0x6e) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x200, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0xfff, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x2) fallocate(r0, 0x3, 0x2, 0xfffe) close(r0) 22:25:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 231.166965] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 231.183716] FAT-fs (loop4): Filesystem has been set read-only 22:25:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') syncfs(r0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) [ 231.217126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8249 sclass=netlink_route_socket pig=15669 comm=syz-executor7 22:25:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000971ff4)={0x801fffffff}) [ 231.501898] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 231.509922] FAT-fs (loop4): Filesystem has been set read-only 22:25:31 executing program 3: getpid() socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/sco\x00') fcntl$notify(r2, 0x402, 0x8000000000010) sendto$inet(r2, &(0x7f0000000100)="59ab474d43a4db90be98d3f3867975a06bd8af222dc23c18a579a681ec8a40a31092a502a3090083f182a4fe22bdde20ffe8038a8558fb59b564ed61f2c533df104036f40fe12533f50fb2745b0b61707d7e", 0x52, 0x4040011, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) getdents(r2, &(0x7f0000000040)=""/182, 0xb6) 22:25:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:31 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) 22:25:31 executing program 1: prctl$intptr(0x24, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20500, 0x2) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x5, 0x3, 0x2}) 22:25:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fdatasync(r0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") unshare(0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$void(r1, 0xc0045878) 22:25:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164", 0x2c, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:31 executing program 1: process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000003000)=[{&(0x7f0000000040)=""/2, 0xffffffffffffffef}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) socketpair(0x0, 0x7ff, 0xf6ba, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0xfffffffffffffeb7, 0x9, 0x8, 0x100, 0x70bd2b, 0x25dfdbfe, {0xf, 0x0, 0x6}, [@typed={0x8, 0xa, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x51) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) r4 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = fcntl$getown(r2, 0x9) sched_getparam(r6, &(0x7f0000000780)) write(r5, &(0x7f00000007c0)="8f0552f908a58f5ca13da56559dd7fcd26d9b545ed8f5fb79276eeca408ef83aebfc668536169c041c0efe3e6061bcc213be8cb11bdcb3663f4e818ed8b4d0fe1557ee889f69fba3700e862f6052623a652c132b84fe257a8f85527d0424b36c8ef3adf0f0afd13a0cb0678c355b3a2f02dd21911769a64e4b893b3b0230e46319327da6673ed7b745d57dc118b84cc4d233ea29085dcba374c6112ad3baea21286dcaa89e94566930a66b825eda3d17fe2e0a43d590c09a78d028c59154d183aeb636034c0015b66ffda3c41d771b", 0xcf) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000004c0)={[], 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x40}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) prctl$setfpexc(0xc, 0x80003) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r2, &(0x7f0000a88f88), 0x0, 0x4, &(0x7f00000005c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0xfffffffffffffe40) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000340)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 22:25:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x9, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) sendto$inet6(r0, &(0x7f0000000240)="8198f4bd880fe715d0b2e963f7c369fc06525b9ddc6edc3cdc1b49b277be1204caefdf2803cf10dad478ff41db1e839c40f17a9bb1ec1308048da529ec1c8dbb1e703ce8863b01bbbcf33f029517cab4f541581c99993b80d0165e517b2cb0165d8cf64b86143d7d0800fb9c47edcdc082b2efb59cbecbbc007ce4d33265e0f4a4b439648f7a6b48bc4e8a86f41f10b978b15be3e10ed5d6c571bf3e47f568e61ac945f20c862fef535bde1a5bb6cb1442c8405e0a121f4d00b6e805ba3c5650add55846fcbe4806dda4249967e352536a859df98a7ff9ea8651a66fb40f995d8b33cd48b9e0232fb0bf8bbc43548a", 0xef, 0x200080c0, &(0x7f00000001c0)={0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x3ff}, 0x401}, 0x1c) 22:25:31 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="dba98bc04b32e705c74d45eddccfe51aaee3465e6b222156952f67ce2f63f593fda547ea8652f6e56db75ccd54f8a424de82a15e17dcd76ae88f0d72f49537454e9b2b0f23f5cd7782635532f39a8652ec7c647029ea5e45dce20211fc16275827e99c50b7d6f479280be82eac0d6cb760be2b55beb2527fa121d7501830e28beb51bb663b920a04e2e395d0728db70f18d7c1c3ce7f623f7b4fe212492e7d7fda2d7a0325bc055487f468cb21ddc9d3d27820317b2a43557358d7f40b0bcf241d790e9864302493e25d839119c5e57bfcc028cc51d230ddd49915bbcc320ac04c6dea44664b8151cb4e", @ANYBLOB=',dfltuid=', @ANYBLOB=',cachetag=/selinux/avc/cache_threshold\x00,\x00']) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x0) sync() r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 22:25:31 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@mcast1, @loopback, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, "70726f6376626f786e65743121822e2c2f7b"}, {0x20, 'selfself@!security%systemuser#'}], 0xa, "246fb6c28b063b30c87c7767c2966e582b6e81050955b76b2c516436e2a7f0e375669666"}, 0x61) 22:25:31 executing program 2: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000180)=0x6e) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x200, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0xfff, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x2) fallocate(r0, 0x3, 0x2, 0xfffe) close(r0) 22:25:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:31 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000000c0)={0xa0, 0xfffffffffffffffb, 0x3}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/133, 0x85}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x31, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000"], 0x0, 0x0, &(0x7f00000003c0)}) 22:25:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @local, 0x0}, &(0x7f00000002c0)=0xc) sendto(r0, &(0x7f0000000380)="ac24a5e53f962a6d4fa020af8c5e5671f83dd719b2212a0839c4c53e69ce7e810c6df435761f21ce51b71f60447eabc14d3c0d654471cbf1a70bb2919d4ddaf98bb7459f8c6896762fe5b7cb29c870b95371a21c4a3e769207a461b6baf3ee9e398cae47daa299d26dc2878e19823ea72de18c573abf680b88b7737a1b2f8d466699e101c5e819437e18db2f7b5a701551cdc592524c8f66bf154ab4fac95da300b1b50ed41f5f", 0xa7, 0x0, &(0x7f0000000440)=@nfc={0x27, 0x0, 0x1}, 0x80) recvfrom$packet(r1, &(0x7f0000000040)=""/37, 0x25, 0x40000002, &(0x7f0000000300)={0x11, 0x1b, r2, 0x1, 0x100000001, 0x6, @broadcast}, 0xffffffffffffffc1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x1239}]}, 0x10) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000340)) getsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000004c0)=""/250, &(0x7f00000005c0)=0xfa) sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0xf) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) pwrite64(r1, &(0x7f0000000180)="972c3588cc2a08bf2175bb5657e24f41b0187e269f99948a72e1495e84ded3ea0b3ecc25ac81c4cc13a57b516129c2f39fa36dbfbfdec9963265d15fc5c4be3d13f0145bf4405d185d69f32aebb03463fffe9b3dd08b56b66e28e03fee10c4f52e110f24aa462152cc9fb2e90af0b9b4a9d42cc72f05be1d9dd079a41aff3fa84afca6882cca8d5a54ece10daa36a67603a40e5ba47eadf6085052fd2d", 0x9d, 0x0) 22:25:32 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x0, 0x4813, 0xffffffffffffffff, 0x63) futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 232.005593] binder: 15756:15761 transaction failed 29189/-22, size 24-8 line 3013 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49}, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:32 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x0, 0x4813, 0xffffffffffffffff, 0x63) futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 232.060659] binder: 15756:15768 transaction failed 29189/-22, size 24-8 line 3013 [ 232.092801] 9pnet: Insufficient options for proto=fd 22:25:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x200) r3 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x9) recvfrom$unix(r1, &(0x7f0000000200)=""/9, 0x9, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb278580e4aedd886c0b629cd32c56ebff94329c3a32a4b8c171676b94083085709923fd77ead8ca0073183b09c62b90673944ded2f276e", "49710f29a576931228cd8c92a1b9375555874f087c556b616155647a2732f399"}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000002580)=0xc) getegid() getpgid(r6) geteuid() read(r2, &(0x7f00000000c0)=""/64, 0x40) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x0, 0x4f9, 0x1f, 0xfffffffffffffffb, 0x6}) fadvise64(r3, 0x0, 0x7, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002d80), &(0x7f0000002dc0)=0xc) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)) geteuid() mlockall(0x8000000002) 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 232.105852] binder: undelivered TRANSACTION_ERROR: 29189 [ 232.188394] binder: undelivered TRANSACTION_ERROR: 29189 22:25:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164", 0x2c, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getegid() mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r9, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0xd, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000700)=""/118, 0x76}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000900)=@getroute={0x14, 0x1a, 0x1c974209d04c2781}, 0x14}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) memfd_create(&(0x7f0000000200)='\x00', 0x1) 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:32 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000280)="27ee7974554c307da38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01afae179f519a9043ca7c07b531cdb8c7fc1038d9100025051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c433a1260000522403df44ee359b5b", 0x70, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 22:25:32 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000)=0x2, 0x4) socketpair$inet(0x2, 0x3, 0x500, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x82) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x880, 0x0) r2 = memfd_create(&(0x7f0000000240)="00eb0c432d0174df5f00000000", 0x2) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x80000000, 0x2000) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2) [ 232.564504] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.576349] FAT-fs (loop4): Filesystem has been set read-only 22:25:32 executing program 2: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) accept$unix(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000180)=0x6e) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x200, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0xfff, 0x7}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x2) fallocate(r0, 0x3, 0x2, 0xfffe) close(r0) 22:25:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80001, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x3ff, 0xfffffffffffeffff, 0xffffffffffffffff, 0x80000001}, 'syz1\x00', 0x2c}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x9, 0x2, 0x8797}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00', 0x2}) 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r8, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:32 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000002bc0)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000440)=0x5, 0x79c2626a) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 22:25:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x422000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x23, 0xf, 0xd, 0x1f, 0x6, 0x93e, 0x5, 0xbd}) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000340)={'system_u:object_r:vmware_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x58) 22:25:32 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x2000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) prctl$getreaper(0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f00000003c0)=0x3, 0x4) close(r0) 22:25:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164", 0x2c, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:32 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) ioctl$TIOCCONS(r3, 0x541d) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x8) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x3ee) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8923, &(0x7f0000000100)={'team_slave_0\x00', @ifru_names='vlan0\x00'}) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00000002c0)={0xa, 0x4e23}, 0x1c) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={0x6, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @rand_addr=0x2}, {0x2, 0x4e20, @multicast1}, 0xa0, 0x5, 0x7, 0xd8c, 0xca3e, &(0x7f0000000440)='bond_slave_1\x00', 0x1000, 0x5, 0x6}) wait4(r1, &(0x7f0000000340), 0x6, &(0x7f0000000380)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x2, 0x3}) r6 = socket$inet(0x10, 0x3, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000240)={r7}) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8014) fcntl$dupfd(r6, 0x0, r6) sendfile(r2, r5, 0x0, 0x68) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 22:25:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x404000, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/9) sched_setaffinity(0x0, 0xfffffffffffffc26, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x6000) fcntl$setownex(r1, 0xf, &(0x7f0000fa4000)) r2 = dup2(r1, r1) sendmsg$unix(r2, &(0x7f0000001740)={&(0x7f0000001400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001480)="1216341881b9d0", 0x7}], 0x1, 0x0, 0x0, 0x24008000}, 0x20008000) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000014c0), &(0x7f0000001540)=0x68) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000013c0)={0xffff, 0x2, 0x2, 0x80}) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r6 = gettid() syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0x0, 0x2) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f00000002c0)}, {&(0x7f0000002380)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) r7 = geteuid() setfsuid(r7) getitimer(0x0, &(0x7f00000001c0)) [ 232.872426] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 232.891883] FAT-fs (loop4): Filesystem has been set read-only 22:25:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = getegid() fchown(0xffffffffffffffff, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:33 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x800000000032, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1}) r2 = userfaultfd(0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) dup3(r2, r3, 0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, 0x2000}) write$selinux_access(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x0) [ 233.026704] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 233.029097] vlan0: renamed from team_slave_0 22:25:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 233.110057] FAULT_FLAG_ALLOW_RETRY missing 70 [ 233.114829] CPU: 0 PID: 15853 Comm: syz-executor7 Not tainted 4.9.124-g09eb2ba #31 [ 233.122540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.131891] ffff88019a637ae0 ffffffff81eb95e9 0000000000000002 0000000000000000 [ 233.140028] ffff8801c0736a80 ffff88019a637cb0 0000000000000000 ffff88019a637cd8 [ 233.148148] ffffffff81cbfdab 0000000000000046 ffff8801b7710908 ffff8801c0736b8c [ 233.156220] Call Trace: [ 233.158813] [] dump_stack+0xc1/0x128 [ 233.164205] [] handle_userfault.cold.18+0x3e/0x51 [ 233.170701] [] ? trace_hardirqs_on+0x10/0x10 [ 233.176760] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 233.183227] [] ? HARDIRQ_verbose+0x10/0x10 [ 233.189151] [] ? handle_mm_fault+0x12e6/0x2a00 [ 233.195390] [] ? handle_mm_fault+0x221f/0x2a00 [ 233.201622] [] handle_mm_fault+0x222d/0x2a00 22:25:33 executing program 5: set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x807, 0x8001, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x60a782820fec975e, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000040)=""/125) [ 233.207679] [] ? HARDIRQ_verbose+0x10/0x10 [ 233.213562] [] ? vm_insert_mixed+0x280/0x280 [ 233.219633] [] __do_page_fault+0x5af/0xd50 [ 233.225517] [] ? mm_fault_error+0x2c0/0x2c0 [ 233.231522] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.238202] [] do_page_fault+0x27/0x30 [ 233.243739] [] page_fault+0x28/0x30 [ 233.387404] FAULT_FLAG_ALLOW_RETRY missing 70 [ 233.392081] CPU: 0 PID: 15864 Comm: syz-executor7 Not tainted 4.9.124-g09eb2ba #31 [ 233.399822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.409186] ffff88019a3bfae0 ffffffff81eb95e9 0000000000000002 0000000000000000 [ 233.417320] ffff8801c0736d80 ffff88019a3bfcb0 0000000000000000 ffff88019a3bfcd8 [ 233.425402] ffffffff81cbfdab 0000000000000046 ffff8801b8088908 ffff8801c0736e8c [ 233.433543] Call Trace: [ 233.436127] [] dump_stack+0xc1/0x128 [ 233.441501] [] handle_userfault.cold.18+0x3e/0x51 [ 233.447995] [] ? trace_hardirqs_on+0x10/0x10 [ 233.454053] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 233.460458] [] ? do_futex+0x176/0x17c0 [ 233.465999] [] ? handle_mm_fault+0x12e6/0x2a00 [ 233.472233] [] ? handle_mm_fault+0x221f/0x2a00 [ 233.478466] [] handle_mm_fault+0x222d/0x2a00 [ 233.484535] [] ? vm_insert_mixed+0x280/0x280 [ 233.490609] [] __do_page_fault+0x5af/0xd50 [ 233.496520] [] ? mm_fault_error+0x2c0/0x2c0 [ 233.502495] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 233.509173] [] do_page_fault+0x27/0x30 [ 233.514711] [] page_fault+0x28/0x30 [ 233.561815] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.573141] FAT-fs (loop4): Filesystem has been set read-only 22:25:33 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x5, 0x40, {0x8, 0x1, 0x1}, 0x0, 0xffffffffffff10db, 0x6, 0x0, 0x19, '/selinux/avc/cache_stats\x00', 0x6, '\'&em1&', 0x19, '/selinux/avc/cache_stats\x00', 0x19, '/selinux/avc/cache_stats\x00'}}, 0x8b) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r2 = gettid() fcntl$setown(r0, 0x8, r2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000200)="ca1f3d729213d57a11cee8b5277c1abfde250b2862504f6fd13d45ab832b3c08a40ee73bdcd449cc2c4b4a0882ebace3dc75bf080efe7e98809eac399504c6c70d4fc44392b90d9da5480c5ec304fd34ac69a5cbe2e4741ddcad306e9bf26f668b7b83bb14ac3d478d255980e1253127215fee15fc7997b61fc7664de146d1d1455e32d6e9635ae5ac1b07ea71f48c9b9b670e0989b27a1eaa4a1d0619cf40361760200adeb5cd54249f73e919722d629beaaf8419a8addc3b789a2b8fd33567eaa1ea90defc64f59375db9593dc", 0xce, 0x20000010, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 22:25:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:33 executing program 1: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) prctl$intptr(0x200000002f, 0x4) 22:25:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r9, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000480)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)=0x0) lseek(r0, 0x0, 0x3) fcntl$setown(r1, 0x8, r3) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = dup2(r5, r4) flock(r6, 0x5) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r7 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) ioctl$RTC_ALM_READ(r8, 0x80247008, &(0x7f00000003c0)) sendto$inet(r7, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) acct(0x0) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) r10 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000280), &(0x7f0000000300)='user\x00', r10) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000000200)=0x0) r12 = syz_open_procfs(r11, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r7, r12, &(0x7f0000000080), 0x80000003) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000580)={0x0}) r14 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x810, r9, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x48, 0x0, &(0x7f00000005c0)=[@increfs_done={0x40106308, r13, 0x1}, @decrefs={0x40046307, 0x3}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, r14}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x4}], 0x1000, 0x0, &(0x7f0000000a80)="5bedf936f5c130b61708420b3a931ab119bbb66cebd1e7e8f69ba264d05229197e998b52b56919b63d6914df5cd0b77267022900e1cfee842fc316e1e1ad91f0aa7e5e52bd32f20701f64c500407a4c2f9b63ab559ce0ce358dcbe59f02a6260801fc0b9d9913490df015a38fb0522d1285a6fcaef46edc93dc44b71549d5812736b95fbf850e1810e2db614b1cd7746373379b65647f7716187ffd5b9293562134661cbdb1c75d4671e46fcb8bd6e77ae8604455e3bea1d683e4b061e5639d0f8c0fed3dbaf7ba6a7e0b6bb658ac831bd449669865bdba8aa7d1adba9d4e486b09f5d119c97d92d58e5cace1af713649eaa1571447a21334ee1db3623883c772caa6bcd42c79eb5c8ae223ead57dbeee1da6959e6875b71e5b76bfbc43b6a368d719a2600b5c3dc7085e3aefd7ac49c01da3753f66143e92c2665c1b8b81666993d4fb01c4ba8ab72d604e6be9ddbee1c663297d2fdf39b3775ef6474a545aed670f5f846b9e5cd210ddeb0c08b4f4fba38493231aa9a7b82fcba3164bfa3e3e99c984a83bf45806af81bda0f68c0c0bd68b5b3c629457931967ae4dcc4a32d4bfb95d7fae235708541b8ffddd20ed11ab87145e1c1170afd814b59d22f063a703f4d89b64297a0bf9de1a2996732224c8a1ba273279501e5b53db1e1677e962ecbded19bb67fd91ab7088eb78c8720a6e684a3c9fe674df89bd0c8dad88dd6750a19a65150ff5b4dd727ec37f3e858f382b94c36ceb3e2565b23cbc4719eac6aadfa78ba66d33b86f098fd8e866150ef3adca2d144dbcd04cce6006325a2a2a51ad84f3639dbf08c761d514038cb0e30c762dbcad1a04212b3ff439d586036db159c275802b40ba37a8129f88f575f698cdce0ca2ea1db69c372af03eaa4cde8468aff9b4b60d8e597dc16011c320ae6129d7a1a7143744481dafd87a0586a3e1bbb72e5b93047707ee67eeb81879ce485b0eea606c58e4c449aa92a40338ff1db724ad71651f70b58b9465ef5002e94df093dd0a30cd4650a0f353ff27aa68ee28513f354a8a42f9cc9ee7e58adb5c9a78235189227e1611a8cc1b8edef9b6708b15fc03ed3ce6c3e988986494f3c5c7a5077e13b6e689a99dd464271c4e119f25595fbb2745ac20d1688558ca35bf1001681d4960f7db9a0cb42d2730d12ef4c4c783aaa7133b3cf9a01f77689404dba8c1dc9576c29d267ad41d97caff8b99b95a4a2698769f034f2ac9a78474111456f83afb4749ac30f76456462c5e4d004b3dd968e0a11614d726f29c787a6a820998161df358cff4b5894cf1882cb4836c3b9c5c31db54a4868989b628f75d170b28e70d95467bd5fe35b24312f5d0cd97ef7a88cd3e79c2bf45b35798fedc73a0da4f47292d4f3c68a1e0601d9eacb2d2a8dfc152477cd81e41f9d00b2370e43954b3c39ceda3aaa80a6b32185f9b15f7f7c184d03ad221a1a6a93c6be0954d84e9321d849d150b8986bb88c83bf7ca90307ba78dc2e067b3c77ae7493106b3495c8bd91b3590f00bef7f0d423d127cfd1b23754702934c12e83ce5a93b4f874f01577a1f86acf849875d9854dff4b6761dd6ec9b3ba00fa54e535c1d5a37a73e8cc72564cddc414ffb61d3925b1ef0cbd2ae983effa8a5b0d04ccc6b3b41faca78421715c0fde474dd595cc6a2cc08070d0ba3ccfc1031d9c98cc9b26b393ab128d8b66052f694a8b05f1fb996a8b6d980b9024e5f7e23e88dcea7b9198eae9ba482549673daa0edaf845da477834523aa8f0554b776bd0dc8c3a390cbffc68a744ff408968f8a77f6cbff66af052cab67a046c813e5921296c273abe6a7e624e2682dddc50f1bdc344aac656b0e5c72325aa73cf552909fff660b9bb189f86e6d4abc64d423915b17c6a281a21f3f048891d6536e2f5d8ee3c509e8aed78a904e9455e35d144c182e670bdf5fbbcaad4b0544a7064a9670d1ebe29c2aa799bde4219dc314e54de419756faa2ee95cf08e47ee6b00eebdb9c5543c19516b2068d92c1f900a99a569ddf78dad9a3016b25e12f92a50fdf7849454c1e0db8e64d9d39282765a229b15f75157c93e04f2850b4f712cff6645bf6267e383daaaffbf148bf05bea8065883ed3faf60619d9dc650d6305ac88a1d7d04bfcd80ef99ced39b8725e24ac2c464aca4bd0454f5bf226d071cf5d4b1603f1acf4f6c3b610558265459d43e9d3c7c4d9e5697ca43fc5af6b256c4787be619f9be3ab41deaf26b18983c47c31bb32805f839a38645c913e3e9cf3e1ac31d344f7c1c602964883c84c2ec40718c767fa25dd5973b4cf8251c37490c58eb5e2b16ad2fc74ad40b3df5889d1bc01c41d2c5ab41e93e547da399bbf60a37ca9055ef0be90b0e232b98c5763140bf0fa9d38c296792bce684b8c4e63123356ac9da6c3a0c8ed118f2819c8327fc759377ee22cb991d581f472a0c02dbe2669d7d969437eb1f0d5337f4c30a43f0940a63121460a4ea2cb66d25dacbafff4904135d50b3f3647f0e4422e8c232403810d7f313d02af94170099e8ed757e6e6685f5c3147cb709800074dadd30d4b5f1e3d66301669b9f8a9fa10e94b3950b77c251967c92fef82b4fe45803f1a936f8656de5fd305b3e870259b5c6de3b4b393f740623e04f8a0eeed0e1223733837c2428af445e70db3f41b0341f1432a9992b5e2a6dc1b40159e9a1ea7fa1399fd15afa2d6dc04dfac11f730e86858f245ca1b37337e665988c43b514e600938434d7b0dbf18260afefe6bb4b62bac133698fde6232ab3540a65eb6efd231b0267f6edb04b292f074b7beca3d5e6f48ca5dca196ac4c8d4397f4fd8a44e8342a3645de14ed8fdadab5dd5b1c72a9bb52db6fa6b956d5f5ba9d3344ffe6d3cb599a9fa1f3d52a8c9766ea3426517a674220b15a1d3f31dde2e08e0e42c6b63dfa0f97c7d472aedaabc0c050bc45bfa303afbb1563e569541369f39a42d0ee0ae2570f0013581729918c1f7b4f1bb199e31d8d045a9e2c54f54cb744c12282502e7777f7a3e4204359ee60105b152e1948ea98025d5a43b2226fb84d42579ac682c8d60f0381fc74e68412f890d1febf8c15e32fa961119121ca9f7d10c825b01b0df8f2212f6c22ec9f52d81e3b1d9e24fc6182cb89dc79506f863bf077a26c1da0ac17a044f8c1efa0038a08a6462f74eec522035e7af17adb56b9e22c7202b4a9e7af6641ee35cc97149797463af36cf4c79bce20d69ae8fde1762193a4ea7b61854233e2bd67b1a121eb08e518f601c363790d2de1b85eaf586bd0aa7977dcd6979f7ce8d84f360128b91a45a298a4978d2e5c0b5dcde8fff8b513c788af370e13cd29c4895481cad619750e80ee53e66b6d50c74b7ba8a0d14263114ef1d2f4f580172bc82695655555d2987a683696d6d429ebb091db59f6aebe2e2379786627fe3374c3fdaacc6ac9368e91eb7dfeedef77ccb1ecf69a825778cfec912f126cc28e7c66c47a92f03ada7eacd963ae053955603465c2db8d60ea42ae56d5e63fec771170ea2c448b8a7de2bbcd05b0558fbe7c5f39d78d3a223202bae02c899e68f9e0625a9e8cd386a14b8464477fc51ee3e5a847be91d266e5f74f7337ba70d45be747e198e769962c4d3fb720135f6b655e961172168c90e92b011b5ef8b114c4375de803da9bfb41b79e051db9772e4bc9761ce62affb3fe0379cdcfea75a11bece63883c55b1428bd83db8ba6b5cc24feb944f1b40ed60049dada88f3885e427b54e2e293d4f893de799012834e12bf4908ab062473981c88d67478cd5eab46d7c65c519ca9b3f37dd22729347c8be39cc8d7669e67ad9a259874438dff01478ef642781616d1732969cfaebc16c660bad05c1031d6b15d5cceda51dba6a91e75a48d5423ece876195bf6406ee89c46bbc3935ae591cde117a83d95dcc05911bbf046bdea86caf430c246f610b947c90b7284253d09e34fc6fb9f724072e74e500795e71169f1a10395736f993c3b5e376097511f225a0dcfb95d58cd2bffaf5e1f85b175a19436305b7509241bb5723f28d7c45a947e27b3b953af0469dd703afe42b4fbc296f938f7e6c1968544c2f286ce35643b7ca7cca7fe3c10e9e8afe1666ae5129f17bc1840db9eec6d968c2333b2913affa4a20c565666aa23cbfb98983ead2ede8edebf217b0c06fbbbb7a4a5ae5b4951bd7b7c2d09353c02a54f6df04aa23db7ddbb1b14ec5aaefa4fc8930a9fe24a5879e2c11b3bc3a43c2ef129e066c16687a94ad8c5047028afcf94ce0780e64bd1aa179992d45d686d1b110ab96e60c4aec85b7303253c83cb3725c2a7e6e13f42fe9ae0c2f15862d247c430cfec161678e361fba05f4d7779c84782b5ca707471533350596b5aae85b44ccf228cdbdca99f3cc89dbf0dae5cea7c0f97f713ec98d497f01087ffa88c1495d49ac66397e136c9ac1800d274234cc21881bdd38761a88d49ac2ea0316be02b09d31fb69ffa68cae784c8119c7b4e4646f2d88171a28943bd339ed34f0031cde90c378d2d36405b41127310ddd86f9471b47f69ade2dc91588cf06681a817a79ddc2974b65d797afe57b8b0eb0926a409b1e2feb113b82695f59cdfe20d3ccb1c75ec32b643eb575c522dbf12b7fc77fad4e78b35ffa432214d3ed2cfd4f6a75a2a581c90ffc528e9c1bc08d9f350b8dae21f0cc77149eef4e746b23b8413c61c0420fdf711b52803b071ae6f283201948ce01eecc7d54030d6f23af320973eeb0f0aed5d5de86c8e479ad9434bcc6f10627d726da98bb7e406329bcd076da56c5555e199b78c0559360698b8f0561f0758c0046d7a30fcc54b8b40455b719ccaad69ce3d7802ab23bd1cc7dd6dc9188ba0253ed8f908388344dc953d9b2bac66cca44e2305d9b99e333dc2ee047371f6c1d09121ac5ef41594c17879bb48a993b4697a2c44db15883e4e87ebc56a092e6c128eb033054621fc94c899d4b9070b7496f59ec8cfd0677193894c799960fecf0726315be5f8adb2b8d7e2ddb2941039821669c4dd64539d5944ce8b8b9a4c0986a16e4d7a4155f3f6f90b7f43bea924845dc4a42c6402e042f5ad8b4ca6d0bbe76a5570f477433f7315eb9d1a5ce2fb4e46a59512ae0534461beac3b565456cf656be077482ff63a402465f5dd7287ec341203605feba0a42b566052d304c5337942497516cc74b8e696affb486eff46ed77c51dc2c9d259902b90da3f352941ede4091ab53058f18cb4d91ba993b187c01e77836d1d542528af227173a445edf90e7f79dc9ca2633e54f039a470cbd25677257750a0d1567359cc67e612b5088f0dcd4d125c1b7de80f3cbf173dd4d22b18919fdedcaea0e3044e71bfffae4f60898270b8d040644e38a7e46836d365c355d72b7260a21c296b05272244990a22ff8455535f04403dbece5322977757d3cffe8c878990ea3e10331244c6f8b2235707dcbc25a9fbf2503e956691cbced9ead41c850c971ff86cce7151431c98683464ac733fb430716efe06a10909d888655832f5e43bc6b7ef6971737b9488b8bb36a24f9e601bd7e3a79cb49356d502ea6dac0551c38f9fe929d014912cf125b9e52910c02905f8c23514b8f025d827b3b28fe3a9aa0695b171a01cafcb88aeaab72301ad708de209160cd84909940784773fcf6ffd1beebd5a523a29fcdc192e2a3543b559856ac910d63480e941ec568de80f5e3dd7fbcedbde47c14028bfbab91518131a67f4ccc6f9481cb9e33190e71e0a9c041c933e7fdf03c453dc87ee1bb66cdbbcb9a3c51f8fb05d8b20acf73"}) 22:25:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b", 0x33, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:33 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000002bc0)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000440)=0x5, 0x79c2626a) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 22:25:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r3, &(0x7f00000003c0)) getegid() connect(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @loopback}, 0x2, 0x1, 0x4, 0x2}}, 0x80) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) getuid() fchown(0xffffffffffffffff, 0x0, 0x0) fadvise64(r3, 0x0, 0x200, 0x4) socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)="6e6673000bdf", 0x0, &(0x7f00000001c0)) accept$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0xffffffffffffffef) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000940)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005004000020010000680300000000000068030000680300006803000004000000", @ANYPTR=&(0x7f0000000e00)=ANY=[@ANYBLOB="0000000000000000f80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b680e7862a21f50d77a4010f45ac982668cd4c6e284eff514471da5e4f0296887e43a20e1f52bd92fdf6c17923ae6e07049a3a22a833054a6d1a74039991e2b4389cd1d49f99ce51f6b8be4a2f6459f8"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010600000006000000ff07000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000003010001f002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00030010000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3000000000000000000000000007ff000000000000ee010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@loopback, 0xe, r5}) write$binfmt_misc(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="73797a31b34ec67a0aba47661df2e3617f221ae80a511c20ba3ba25bd11094461ec04e23ca196d4b4207d107e755d5f7618a311f3bd595bc341f6efeac1efedefdb6ce895af242397c3e7e21bd86c2b153f0ae1b811c28ea25a5bc82803fa89bbb11174d1c45092af1628f68a79f20bb3ad0d3ceecf25d33a6bc29b7e3fbcc8204474859e0ff73ee35a75cd7b8332918304b77e3721e6b9471a87caed6982783a2"], 0xa2) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000580), &(0x7f00000003c0)) connect(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x1, {0xa, 0x0, 0x2, @mcast1, 0x20000000}}}, 0x80) 22:25:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r9, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:33 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) 22:25:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r5 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r3, r4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:34 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/107, 0x6b) syz_open_pts(0xffffffffffffffff, 0x0) 22:25:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x0, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:34 executing program 5: set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x807, 0x8001, &(0x7f00000001c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000380)=0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x60a782820fec975e, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000040)=""/125) [ 234.172456] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 234.180896] FAT-fs (loop4): Filesystem has been set read-only 22:25:34 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x5, 0x40, {0x8, 0x1, 0x1}, 0x0, 0xffffffffffff10db, 0x6, 0x0, 0x19, '/selinux/avc/cache_stats\x00', 0x6, '\'&em1&', 0x19, '/selinux/avc/cache_stats\x00', 0x19, '/selinux/avc/cache_stats\x00'}}, 0x8b) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r2 = gettid() fcntl$setown(r0, 0x8, r2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000200)="ca1f3d729213d57a11cee8b5277c1abfde250b2862504f6fd13d45ab832b3c08a40ee73bdcd449cc2c4b4a0882ebace3dc75bf080efe7e98809eac399504c6c70d4fc44392b90d9da5480c5ec304fd34ac69a5cbe2e4741ddcad306e9bf26f668b7b83bb14ac3d478d255980e1253127215fee15fc7997b61fc7664de146d1d1455e32d6e9635ae5ac1b07ea71f48c9b9b670e0989b27a1eaa4a1d0619cf40361760200adeb5cd54249f73e919722d629beaaf8419a8addc3b789a2b8fd33567eaa1ea90defc64f59375db9593dc", 0xce, 0x20000010, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 22:25:34 executing program 7: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x9) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x29, @multicast1, 0x4e24, 0x1, 'sh\x00', 0x0, 0x0, 0x46}, 0x2c) r1 = socket$inet(0x2, 0x6, 0x401fb) keyctl$set_reqkey_keyring(0xe, 0x3) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6664e2ae1bd05487d5a17a7ab719163ef7d4cfc585513ab577fe3956c15b3ea54f2fe0ce27d928f66a0a87209b041cd8a69f9a510494904de59cacf9e3446116b8f1b100974149ab4950d8b690fbf9b34183b0aafe9d3fa3afba74f12a48bffaab20b071eb251abd4425bf901ad7c72e641098e0c4428e3a28eb8a2b12960ea43de4bfd0f260ee9b10b93401b5dd2d725e5614318684fba8cc4da7561f9591037274e16227c483317274e4a9d8e0ab2e1a11ab3aabcff32718378244fcf96aa53bd657c574e222013602d059265660a3e6a345fa1b9552bebeba92caccaeb73b8d476ef1f8d4835f1b24d0bc3313", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 22:25:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x0, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b", 0x33, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r9, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) madvise(&(0x7f0000a06000/0x4000)=nil, 0x4000, 0x800000000000012) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x2582fbdc380b0a8, 0xfffffffffffffffd, 0x0, 0xffffffffffffff39) 22:25:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair(0xc, 0x5, 0x1ff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f00000002c0)={0x6, 0x0, 0x2, 0x1, 0x1, 0x1fd}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000200)={0xfff, 0x5, 0x10000, 0x1, 0x5, 0x4}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002800030008000300000000004000000000000000df31d493226d18ef0adc5a0014000d00626f6e645f736c6176655f3000000000565624f27c55bff0528bd0e2bb9473797a060fbe3f70b5ae585928dabfe4a2bbce5e24822a7912cf6032ee10652928204ca82049319750a2a075cb5cb5fb9aadb72c291477b647f0c44381672be6de26bb22d0eb7527f3977e1e1933bba14ce0ab31f0a804fc5fe5214454c3d1fe8568a10a78edb41b1e10d0ea795a1345e1619a210000000000000000000000"], 0x3c}}, 0x0) 22:25:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x40040, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x40000001, r1, &(0x7f0000000080)='.\x00') close(r1) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x0, 0x1, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b", 0x33, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x0, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:35 executing program 5: r0 = socket(0xa, 0xfffffffffffffffd, 0x408000) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', r1}) r3 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="6c090000280000012abd706ee385f7e9e16d24736cedf766145100fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x96c}, 0x1, 0x0, 0x0, 0x20008001}, 0xc010) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@mcast1, @loopback, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = dup3(r3, r0, 0x80000) ioctl$RTC_UIE_ON(r4, 0x7003) 22:25:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x20000000000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x1278, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80800, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000280)={'raw\x00'}, &(0x7f0000000300)=0x54) r3 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000080)=""/210, &(0x7f0000000340)=0x10000032e) 22:25:35 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x7) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x3f, &(0x7f00000000c0)=0x80400000001, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='ifb0\x00') sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/uts\x00') getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f0000000000)=0x54) close(r3) dup3(r1, r2, 0x0) [ 235.084053] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. [ 235.105837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12849 sclass=netlink_route_socket pig=15951 comm=syz-executor3 [ 235.109520] netlink: 28 bytes leftover after parsing attributes in process `syz-executor1'. [ 235.622229] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 235.630132] FAT-fs (loop4): Filesystem has been set read-only 22:25:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0xab, 0x400, 0x3, 0x0, 0x0, [{r0, 0x0, 0xfffffffffffffffa}, {r1, 0x0, 0x100000001}, {r0, 0x0, 0x1}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setrlimit(0xc, &(0x7f0000000000)={0x0, 0xfffffffffffffffa}) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x65, @mcast1, 0x6}}, {{0xa, 0x4e20, 0x8000, @ipv4, 0x4}}}, 0x108) 22:25:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x0, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:35 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000500)=0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xffffffffffffff88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) getrlimit(0x0, &(0x7f00000004c0)) pwritev(r1, &(0x7f0000002800)=[{&(0x7f0000000540)="aee142f9834c8f392f9c2d8a51ba744de24245cdec77b94a072156169cfd4335a25b14043cf1fc4ba03fcefd682b594608819f09ed5d787a76f98fb33c3116eeef53031dbf070e5474cbbe985225e0522af4efa5212ba19dfd2bb180741f16c1838a8fd27d616b8da96e97f8ee7436177d1cc2b12a0646557bd75dc8e427b82e1c8d2569085190be04a0b32826d044d5301f5d9fd1f96c66", 0x98}], 0x1, 0x0) unshare(0x0) 22:25:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x803, 0x100) unshare(0x84003fd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x400000, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4}]}]}, 0x24}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000050000000631e0215a471025e6c7b54d78a3860287080bcd29d9307e919237a8ee46c837fe34da27fde8d0de25fce956f90d4828d4a202979bfd1179ff8615bf4900d0d1d2d0acb891895c0fdc6a02b5f3253ec0b"], &(0x7f00000000c0)=0x74) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000140)) read$FUSE(r5, &(0x7f00000002c0), 0x1000) 22:25:35 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0xf900}}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0x16f, 0x77, 0x1}, 0xb) write$P9_RSTATu(r1, &(0x7f0000000a40)={0x76, 0x7d, 0x1, {{0x0, 0x5c, 0x0, 0x0, {}, 0x100000, 0x0, 0x0, 0x0, 0x0, "", 0x9, 'trans=fd,', 0x17, '{]md5sumGPL.mime_type\')', 0x9, 'trans=fd,'}, 0x5, 'wfdno'}}, 0x76) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r1, 0x0, 0x6, 0xffffffff, 0x2}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x0, 0x7530}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) 22:25:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) fcntl$getown(r0, 0x9) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r3, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x1, 0x800000, 0x8) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="9e6f88e11e8179a66d874db1bf8246a3673e75954facba887b34835c88b5e869c5862761035ca05920d9a164e76866e4fe7a3b4734fc21", 0x37, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/4096, 0x714) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000140)={{}, 'syz0\x00'}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0xc7e55336b975f129) 22:25:35 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203a16e48a11c00e0000001000000000000000002000100100000000800000200000000030005000000000002000000e00000010000000000000000000000000000000000"], 0x50}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) write$P9_RLOCK(r2, &(0x7f0000000100)={0x8, 0x35, 0x1}, 0x8) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x0, 0x3}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x200000000000001e, &(0x7f0000000040)}, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x101000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x3800000000000000, @mcast2, 0xb5}, {0xa, 0x4e21, 0xfffffffffffffffe, @local, 0x10000}, 0x1, [0x0, 0x401, 0x2, 0x8e, 0x4, 0x4, 0xd924, 0x3]}, 0x5c) 22:25:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, 0x0, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r3, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r10, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:35 executing program 2: rename(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r2 = socket(0x2, 0x803, 0x3f) connect$inet(r2, &(0x7f0000390000)={0x2, 0x0, @loopback}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000240)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141046, 0x100000) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x80, 0x0) ftruncate(r3, 0x10004) sendfile(r2, r3, 0x0, 0x72439a6b) fsetxattr(r0, &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)='/dev/input/mice\x00', 0x10, 0x0) socket$inet(0x2, 0x807, 0x9) 22:25:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:36 executing program 5: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x103000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xfef5) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="0371b3247549d4d09c69efde4832e28804098207bb99e066739582886b89b7672c16d0baea4f7b13885e8be4d0d9e91f949ac08015cd00c704f52ddc4897c3a1babfeef9a95ff65ed002624fb40c277b79576e71fa17ed92168b4cadd5eec7beea0eab4052e21ef9b1fa2977eca17dea8df2bfc83db9fefb8136ca896d9eca9cbadb197fa25aa60eda08b5ab937d0f0c23b10f1af88e76c3584accf748cb5a9392bffdb581f1af84b351d7cea638fff4c2f34e9945f40fa24810dc23314d8a6a0677849e8fb2b75b01e4ad825c17dbf3e3a58f746169ab9536c36617fbdcae2009ff3b0471993334c8e27742ae114d9bdd48e1e4") ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000200)={{0x8001}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff}) socket$key(0xf, 0x3, 0x2) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) read(r0, &(0x7f0000000180)=""/19, 0x34f4bd94029d5dd1) read(r2, &(0x7f0000000100)=""/93, 0x5d) 22:25:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x5, {{0x2, 0x4e24, @remote}}}, 0x88) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) 22:25:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) ioctl$int_in(r1, 0x600005452, &(0x7f0000000140)=0x1) bind$netlink(r1, &(0x7f0000000180), 0xc) socket$inet6(0xa, 0x5, 0x7) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x3bf) 22:25:36 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = getpgid(0x0) gettid() sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000003c0)="e1616c50e2b5b875c38cace6000ea9b58fc8e54ba1e25aa2952a077e11d0284b8335098768aadb5e2f7cb9e82daa83b10b5603338f32d426d88599b9cf16e9bfd38908c4fa32f0f762540489e0870000adf432e50a60a34b532115493f3a81362bf4666f687265c34407c14f1f3dc8d444d09041b3be3931fb393c7c09a18b94c73255946a888f7928deda67dce08538dc88c766607703274d77e9a7951af2f333eaf3645f", 0xa5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000380)) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x3) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0), &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) 22:25:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0x121) recvmsg(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x4, &(0x7f00000025c0)=""/73, 0x49, 0x100000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000026c0)=0x3ff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000002840)={0x10000, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = geteuid() getgroups(0x4, &(0x7f00000028c0)=[0x0, 0xee00, 0xee00, 0xee00]) r6 = creat(&(0x7f0000002900)='./file0\x00', 0x130) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000002940)) lchown(&(0x7f0000002880)='./file0\x00', r4, r5) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000002800)={0x3, 0x401, 0x3, 0x8918, 0x0, 0x1ff}) getpeername(r0, &(0x7f0000000140)=@llc, &(0x7f00000000c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002700)='/dev/snapshot\x00', 0x200200, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x14e, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 22:25:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) futimesat(r2, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r6, r7/1000+30000}}) sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = getegid() fchown(r8, 0x0, r9) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x7467, 0x9, 0x1, "96c1ba742ddc1c0500000000000000b31b3d0c4e1b7074d8f7d08a56656d21866825899e22528bc802007ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a00b700"}, 0xfffffffffffffd12) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r11, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000019c0)=""/216) [ 236.461615] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 236.469665] FAT-fs (loop4): Filesystem has been set read-only [ 237.495016] IPVS: Creating netns size=2536 id=27 [ 237.666367] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.680454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.737660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.751920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 237.808228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 237.823008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.837919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.854112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.509946] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.544641] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.550855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.557505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.210716] INFO: task syz-executor3:16458 blocked for more than 140 seconds. [ 429.218110] Not tainted 4.9.124-g09eb2ba #31 [ 429.223157] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.231215] syz-executor3 D28760 16458 16084 0x00000004 [ 429.236979] ffff8801c70e6000 ffff8801cca86a00 ffff8801d60a8a80 ffff8801ccb50000 [ 429.245149] ffff8801db221c18 ffff88019d9b7978 ffffffff839f0afd ffffffff81237da7 [ 429.253317] 0000000000000000 ffff8801c70e68c0 0000000600000007 ffff8801db2224e8 [ 429.261423] Call Trace: [ 429.264000] [] ? __schedule+0x64d/0x1bd0 [ 429.269689] [] ? mark_held_locks+0xc7/0x130 [ 429.275685] [] schedule+0x7f/0x1b0 [ 429.280898] [] rwsem_down_write_failed+0x598/0x990 [ 429.287462] [] ? rwsem_down_write_failed+0x18c/0x990 [ 429.294469] [] ? rwsem_down_write_failed_killable+0xb40/0xb40 [ 429.302048] [] ? trace_hardirqs_on+0x10/0x10 [ 429.308102] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 429.314952] [] ? check_preemption_disabled+0x3b/0x170 [ 429.321802] [] ? __lock_is_held+0xa2/0xf0 [ 429.327579] [] call_rwsem_down_write_failed+0x17/0x30 [ 429.334531] [] down_write+0x5c/0xa0 [ 429.339852] [] ? utimes_common.isra.1+0x2d1/0x5e0 [ 429.346400] [] utimes_common.isra.1+0x2d1/0x5e0 [ 429.352757] [] ? SyS_sync_file_range2+0x250/0x250 [ 429.359797] [] ? strncpy_from_user+0x20d/0x2d0 [ 429.366071] [] do_utimes+0x19e/0x2c0 [ 429.371450] [] ? utimes_common.isra.1+0x5e0/0x5e0 [ 429.377929] [] ? __might_fault+0x114/0x1d0 [ 429.383834] [] SyS_utimes+0x13d/0x1b0 [ 429.389277] [] ? SyS_futimesat+0x1b0/0x1b0 [ 429.395181] [] ? do_syscall_64+0x48/0x490 [ 429.401105] [] ? SyS_futimesat+0x1b0/0x1b0 [ 429.406970] [] do_syscall_64+0x1a6/0x490 [ 429.412714] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 429.419632] [ 429.419632] Showing all locks held in the system: [ 429.425980] 2 locks held by khungtaskd/518: [ 429.430292] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 429.439293] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 429.449028] 1 lock held by rsyslogd/3690: [ 429.453199] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 429.462109] 2 locks held by getty/3786: [ 429.466063] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 429.475397] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 429.485715] 2 locks held by syz-executor3/16456: [ 429.490448] #0: (sb_writers#17){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 429.499737] #1: (&sb->s_type->i_mutex_key#24){++++++}, at: [] utimes_common.isra.1+0x2d1/0x5e0 [ 429.511086] 2 locks held by syz-executor3/16458: [ 429.516024] #0: (sb_writers#17){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 429.525319] #1: (&sb->s_type->i_mutex_key#24){++++++}, at: [] utimes_common.isra.1+0x2d1/0x5e0 [ 429.536442] [ 429.538161] ============================================= [ 429.538161] [ 429.545585] NMI backtrace for cpu 0 [ 429.549195] CPU: 0 PID: 518 Comm: khungtaskd Not tainted 4.9.124-g09eb2ba #31 [ 429.556439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.565766] ffff8801d8597d08 ffffffff81eb95e9 0000000000000000 0000000000000000 [ 429.573861] 0000000000000000 0000000000000001 ffffffff810b9fa0 ffff8801d8597d40 [ 429.581939] ffffffff81ec4927 0000000000000000 0000000000000000 0000000000000003 [ 429.589925] Call Trace: [ 429.592491] [] dump_stack+0xc1/0x128 [ 429.597831] [] ? irq_force_complete_move+0x320/0x320 [ 429.604556] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 429.611028] [] ? irq_force_complete_move+0x320/0x320 [ 429.617772] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 429.624844] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 429.631834] [] watchdog+0x6b4/0xa20 [ 429.637085] [] ? watchdog+0x11c/0xa20 [ 429.642514] [] kthread+0x26d/0x300 [ 429.647676] [] ? reset_hung_task_detector+0x20/0x20 [ 429.654313] [] ? kthread_park+0xa0/0xa0 [ 429.659913] [] ? __switch_to_asm+0x34/0x70 [ 429.665768] [] ? kthread_park+0xa0/0xa0 [ 429.671364] [] ? kthread_park+0xa0/0xa0 [ 429.677067] [] ret_from_fork+0x5c/0x70 [ 429.682817] Sending NMI from CPU 0 to CPUs 1: [ 429.687366] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff83a00606 [ 429.694764] Kernel panic - not syncing: hung_task: blocked tasks [ 429.700900] CPU: 0 PID: 518 Comm: khungtaskd Not tainted 4.9.124-g09eb2ba #31 [ 429.708188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.717523] ffff8801d8597cc8 ffffffff81eb95e9 ffffffff83c8c0a0 00000000ffffffff [ 429.725511] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d8597d88 [ 429.733491] ffffffff81423eb5 0000000041b58ab3 ffffffff843bb8e8 ffffffff81423cf6 [ 429.741479] Call Trace: [ 429.744051] [] dump_stack+0xc1/0x128 [ 429.749389] [] panic+0x1bf/0x3bc [ 429.754380] [] ? add_taint.cold.6+0x16/0x16 [ 429.760328] [] ? ___preempt_schedule+0x16/0x18 [ 429.766535] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 429.773783] [] watchdog+0x6c5/0xa20 [ 429.779031] [] ? watchdog+0x11c/0xa20 [ 429.784455] [] kthread+0x26d/0x300 [ 429.789623] [] ? reset_hung_task_detector+0x20/0x20 [ 429.796270] [] ? kthread_park+0xa0/0xa0 [ 429.801873] [] ? __switch_to_asm+0x34/0x70 [ 429.807730] [] ? kthread_park+0xa0/0xa0 [ 429.813396] [] ? kthread_park+0xa0/0xa0 [ 429.819001] [] ret_from_fork+0x5c/0x70 [ 429.824827] Dumping ftrace buffer: [ 429.828477] (ftrace buffer empty) [ 429.832174] Kernel Offset: disabled [ 429.835839] Rebooting in 86400 seconds..