0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x2000000000031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)) 08:08:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5432, &(0x7f00000001c0)) 08:08:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/170) creat(&(0x7f0000001380)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_create(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) 08:08:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) 08:08:09 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) 08:08:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r0 = open(&(0x7f00000002c0)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000380)="b6904e5e80609519b7d4f66713906161be2c13387fde28a088f4632bfb557369c279b96ffdf63b162f9cc72b53cfa25c4efedfd38323dd64ea35386e0b30211f576ff7be6ce4091c9534753141d127ec21a534c0960a4744d49566b1f07609857f378eb785fd3ac23cca57579a7de368c6efa1d1801b1dc079582768cfc84a8b7fafbc3c20e640676975e70435da16552a47c61bc8a784eb7e5aea7ec398c47880267690c50c382c2b8cd93de43f", 0xae, 0xa06, &(0x7f0000000480)={0x77359400}) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 08:08:09 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/170) creat(&(0x7f0000001380)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_create(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) 08:08:09 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) [ 332.882003] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/170) creat(&(0x7f0000001380)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_create(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) 08:08:09 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) 08:08:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r0 = open(&(0x7f00000002c0)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000380)="b6904e5e80609519b7d4f66713906161be2c13387fde28a088f4632bfb557369c279b96ffdf63b162f9cc72b53cfa25c4efedfd38323dd64ea35386e0b30211f576ff7be6ce4091c9534753141d127ec21a534c0960a4744d49566b1f07609857f378eb785fd3ac23cca57579a7de368c6efa1d1801b1dc079582768cfc84a8b7fafbc3c20e640676975e70435da16552a47c61bc8a784eb7e5aea7ec398c47880267690c50c382c2b8cd93de43f", 0xae, 0xa06, &(0x7f0000000480)={0x77359400}) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 08:08:09 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) 08:08:09 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) 08:08:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) [ 333.467585] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000100c0)={@remote, @rand_addr}, &(0x7f0000010100)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000010140)={0x0, @multicast1, @dev}, &(0x7f0000010180)=0xc) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000280)=0x44) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 08:08:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) [ 333.514575] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r0 = open(&(0x7f00000002c0)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000380)="b6904e5e80609519b7d4f66713906161be2c13387fde28a088f4632bfb557369c279b96ffdf63b162f9cc72b53cfa25c4efedfd38323dd64ea35386e0b30211f576ff7be6ce4091c9534753141d127ec21a534c0960a4744d49566b1f07609857f378eb785fd3ac23cca57579a7de368c6efa1d1801b1dc079582768cfc84a8b7fafbc3c20e640676975e70435da16552a47c61bc8a784eb7e5aea7ec398c47880267690c50c382c2b8cd93de43f", 0xae, 0xa06, &(0x7f0000000480)={0x77359400}) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) [ 333.647958] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)=""/170) creat(&(0x7f0000001380)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4000) write$selinux_create(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x7530}}, {{0x0, 0x7530}}, {{0x77359400}, 0x0, 0x8}], 0x48) 08:08:10 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@bridge_getlink={0x34, 0x12, 0xc01, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0) 08:08:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) 08:08:10 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) ioperm(0x3, 0x2, 0x1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0/file0\x00', 0x8, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="d35b82dd263e", 0x6, 0x400}], 0x200000, &(0x7f00000005c0)={[{@fat=@usefree='usefree'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r3, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r4, r0, &(0x7f00000000c0), 0x1) 08:08:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) r0 = open(&(0x7f00000002c0)='./file1\x00', 0x40, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000280)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000380)="b6904e5e80609519b7d4f66713906161be2c13387fde28a088f4632bfb557369c279b96ffdf63b162f9cc72b53cfa25c4efedfd38323dd64ea35386e0b30211f576ff7be6ce4091c9534753141d127ec21a534c0960a4744d49566b1f07609857f378eb785fd3ac23cca57579a7de368c6efa1d1801b1dc079582768cfc84a8b7fafbc3c20e640676975e70435da16552a47c61bc8a784eb7e5aea7ec398c47880267690c50c382c2b8cd93de43f", 0xae, 0xa06, &(0x7f0000000480)={0x77359400}) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 08:08:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) [ 333.929004] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) [ 334.032892] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f0000000100), 0x100002be, 0x8000000010400003) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) lseek(r0, 0x0, 0x1) 08:08:10 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f0000000100), 0x100002be, 0x8000000010400003) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) lseek(r0, 0x0, 0x1) [ 334.141718] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:10 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f0000000100), 0x100002be, 0x8000000010400003) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) lseek(r0, 0x0, 0x1) 08:08:10 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x10080000000, 0x19d) 08:08:10 executing program 7: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') preadv(r0, &(0x7f0000000100), 0x100002be, 0x8000000010400003) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) lseek(r0, 0x0, 0x1) 08:08:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) [ 334.364009] IPVS: Creating netns size=2536 id=61 08:08:11 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000100c0)={@remote, @rand_addr}, &(0x7f0000010100)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000010140)={0x0, @multicast1, @dev}, &(0x7f0000010180)=0xc) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000280)=0x44) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 08:08:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) 08:08:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}]}) [ 334.429854] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 334.508133] FAT-fs (loop4): bogus number of reserved sectors [ 334.523742] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x800002, 0x11, r2, 0x0) 08:08:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) [ 334.579105] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 334.639626] FAT-fs (loop4): Can't find a valid FAT filesystem [ 334.721610] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 335.588326] pktgen: kernel_thread() failed for cpu 0 [ 335.593463] pktgen: Cannot create thread for cpu 0 (-4) [ 335.598895] pktgen: kernel_thread() failed for cpu 1 [ 335.604042] pktgen: Cannot create thread for cpu 1 (-4) [ 335.609515] pktgen: Initialization failed for all threads 08:08:12 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) ioperm(0x3, 0x2, 0x1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0/file0\x00', 0x8, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="d35b82dd263e", 0x6, 0x400}], 0x200000, &(0x7f00000005c0)={[{@fat=@usefree='usefree'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r3, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r4, r0, &(0x7f00000000c0), 0x1) 08:08:12 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000100c0)={@remote, @rand_addr}, &(0x7f0000010100)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000010140)={0x0, @multicast1, @dev}, &(0x7f0000010180)=0xc) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000280)=0x44) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000100)=0x6e) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000180)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 08:08:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 08:08:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) 08:08:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}]}) 08:08:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f00000019c0)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d00000000000000000000000000000000000000000000000000000000000000000000000000002b710000000000000000000000000000000000000000000000000000000000000000000000000000be00000000000000000000000000000000000000000000000000000000000000"], 0x2f4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/224, 0xe0}], 0x1, &(0x7f0000000000)=""/20, 0x14}, 0x100) 08:08:12 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4, 0x0, 0x20}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) [ 335.773322] FAT-fs (loop4): bogus number of reserved sectors [ 335.799087] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 08:08:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000180)=""/130) [ 335.836735] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}]}) 08:08:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={&(0x7f0000000400), 0xc, &(0x7f0000000740)={&(0x7f0000000180)=@migrate={0xb8, 0x21, 0x705, 0x0, 0x0, {{@in=@local, @in=@rand_addr}}, [@migrate={0x5c, 0x11, [{@in6=@loopback}, {@in=@broadcast, @in6=@loopback}]}, @policy_type={0xc}]}, 0xb8}}, 0x0) [ 335.988589] FAT-fs (loop4): bogus number of reserved sectors [ 336.010548] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 08:08:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 08:08:12 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x80000) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x39c, 0x0) [ 336.055282] FAT-fs (loop4): Can't find a valid FAT filesystem [ 336.114420] IPVS: Creating netns size=2536 id=62 08:08:13 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) ioperm(0x3, 0x2, 0x1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0/file0\x00', 0x8, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="d35b82dd263e", 0x6, 0x400}], 0x200000, &(0x7f00000005c0)={[{@fat=@usefree='usefree'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r3, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r4, r0, &(0x7f00000000c0), 0x1) 08:08:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@errors_remount='errors=remount-ro'}, {@nodots='nodots'}]}) 08:08:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) 08:08:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) 08:08:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:13 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f") r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000140)={@ipv4={[], [], @multicast1}, r6}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a40)={@empty, @multicast1}, &(0x7f0000001a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xfffffd26) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @local}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @empty, @multicast1}, &(0x7f0000001e80)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'veth0_to_bridge\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002140)={0x0, @loopback, @dev}, &(0x7f0000002180)=0xc) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000300)=""/19) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'ip_vti0\x00'}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000003c0)) r7 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x3, 0x4) tkill(r7, 0x0) [ 336.641548] FAT-fs (loop4): bogus number of reserved sectors [ 336.649500] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 336.660076] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:13 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x340, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x8, @dev}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000240)}, 0x2000) 08:08:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x800000) select(0x40, &(0x7f0000000100)={0x0, 0x2, 0x5060, 0x2, 0x1ff, 0x81, 0x0, 0xffffffff}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5451}, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x8, 0x7ff, 0x0, 0x8, 0xff}, &(0x7f00000001c0)) 08:08:13 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x52, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x41, 0x0) r1 = socket$packet(0x11, 0x8006, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7, 0x9000}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r4, &(0x7f0000000340)=""/224, 0xe0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0xffffffffffffffff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$nl_netfilter(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1df}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'gre0\x00'}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @local}, &(0x7f0000000a40)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', r6}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$getown(r5, 0x9) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x0, {{0x2, 0x4e22}}}, 0x88) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000540)='task\x00', 0x5, 0x2) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xfbd) fallocate(r1, 0x40, 0x1, 0x6) pwrite64(r8, &(0x7f00000001c0)="6de6860cac9d60925e6816ffd72599639d019ff8b6711ca4794dfd34f7d8c5e00adb47afa17f10c0b3a2c6f3a603c260ab5e049652adbb4c485a33506e4133f392035bc45ac679e88ae733045fc954ccb4c486798621bc9355cb86bb40ab24aeea0437cf01939318b3c3d2f0e1a47d70e9959c684802812381d5cc126938ec6e80cf581e6fe29e46b17e11ca0112c44932245f72bd645df1021b92806037c17abbdc12", 0xa3, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) getrandom(&(0x7f0000001580)=""/154, 0x9a, 0x3) 08:08:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x800000) select(0x40, &(0x7f0000000100)={0x0, 0x2, 0x5060, 0x2, 0x1ff, 0x81, 0x0, 0xffffffff}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5451}, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x8, 0x7ff, 0x0, 0x8, 0xff}, &(0x7f00000001c0)) 08:08:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x800000) select(0x40, &(0x7f0000000100)={0x0, 0x2, 0x5060, 0x2, 0x1ff, 0x81, 0x0, 0xffffffff}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5451}, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x8, 0x7ff, 0x0, 0x8, 0xff}, &(0x7f00000001c0)) 08:08:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x80000) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x39c, 0x0) 08:08:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x800000) select(0x40, &(0x7f0000000100)={0x0, 0x2, 0x5060, 0x2, 0x1ff, 0x81, 0x0, 0xffffffff}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x7, 0x5451}, &(0x7f0000000180)={0x6, 0x1, 0x3, 0x8, 0x7ff, 0x0, 0x8, 0xff}, &(0x7f00000001c0)) 08:08:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) [ 337.556661] pktgen: kernel_thread() failed for cpu 0 [ 337.562293] pktgen: Cannot create thread for cpu 0 (-4) [ 337.567793] pktgen: kernel_thread() failed for cpu 1 [ 337.573049] pktgen: Cannot create thread for cpu 1 (-4) [ 337.578508] pktgen: Initialization failed for all threads 08:08:14 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) ioperm(0x3, 0x2, 0x1) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0/file0\x00', 0x8, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="d35b82dd263e", 0x6, 0x400}], 0x200000, &(0x7f00000005c0)={[{@fat=@usefree='usefree'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}]}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace$peekuser(0x3, r3, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r4, r0, &(0x7f00000000c0), 0x1) 08:08:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:14 executing program 4: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000000c0)={'e\bl\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\t\x00', 0x81}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000001740)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x88) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r1 = gettid() fcntl$setown(r0, 0x8, r1) 08:08:14 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x52, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x41, 0x0) r1 = socket$packet(0x11, 0x8006, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7, 0x9000}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r4, &(0x7f0000000340)=""/224, 0xe0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0xffffffffffffffff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$nl_netfilter(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1df}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'gre0\x00'}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @local}, &(0x7f0000000a40)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', r6}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$getown(r5, 0x9) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x0, {{0x2, 0x4e22}}}, 0x88) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000540)='task\x00', 0x5, 0x2) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xfbd) fallocate(r1, 0x40, 0x1, 0x6) pwrite64(r8, &(0x7f00000001c0)="6de6860cac9d60925e6816ffd72599639d019ff8b6711ca4794dfd34f7d8c5e00adb47afa17f10c0b3a2c6f3a603c260ab5e049652adbb4c485a33506e4133f392035bc45ac679e88ae733045fc954ccb4c486798621bc9355cb86bb40ab24aeea0437cf01939318b3c3d2f0e1a47d70e9959c684802812381d5cc126938ec6e80cf581e6fe29e46b17e11ca0112c44932245f72bd645df1021b92806037c17abbdc12", 0xa3, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) getrandom(&(0x7f0000001580)=""/154, 0x9a, 0x3) 08:08:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r0, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) 08:08:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x80000) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x39c, 0x0) 08:08:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) [ 337.884756] IPVS: Creating netns size=2536 id=63 08:08:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:14 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x52, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x41, 0x0) r1 = socket$packet(0x11, 0x8006, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7, 0x9000}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r4, &(0x7f0000000340)=""/224, 0xe0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0xffffffffffffffff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$nl_netfilter(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1df}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'gre0\x00'}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @local}, &(0x7f0000000a40)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', r6}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$getown(r5, 0x9) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x0, {{0x2, 0x4e22}}}, 0x88) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000540)='task\x00', 0x5, 0x2) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xfbd) fallocate(r1, 0x40, 0x1, 0x6) pwrite64(r8, &(0x7f00000001c0)="6de6860cac9d60925e6816ffd72599639d019ff8b6711ca4794dfd34f7d8c5e00adb47afa17f10c0b3a2c6f3a603c260ab5e049652adbb4c485a33506e4133f392035bc45ac679e88ae733045fc954ccb4c486798621bc9355cb86bb40ab24aeea0437cf01939318b3c3d2f0e1a47d70e9959c684802812381d5cc126938ec6e80cf581e6fe29e46b17e11ca0112c44932245f72bd645df1021b92806037c17abbdc12", 0xa3, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) getrandom(&(0x7f0000001580)=""/154, 0x9a, 0x3) 08:08:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0xffffffffffffffff) creat(&(0x7f00000007c0)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 08:08:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = dup(r1) recvmsg(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001580)=""/106, 0x6a}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000100)="05", 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) 08:08:14 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0xfffffffffffffffc) r2 = inotify_init1(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x2, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 08:08:14 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x52, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x41, 0x0) r1 = socket$packet(0x11, 0x8006, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7, 0x9000}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket(0x200000000000011, 0x4000000000080003, 0x80) flistxattr(r4, &(0x7f0000000340)=""/224, 0xe0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0xffffffffffffffff) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmsg$nl_netfilter(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1df}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'gre0\x00'}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @local}, &(0x7f0000000a40)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', r6}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) fcntl$getown(r5, 0x9) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x0, {{0x2, 0x4e22}}}, 0x88) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8) lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000540)='task\x00', 0x5, 0x2) r8 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0xfbd) fallocate(r1, 0x40, 0x1, 0x6) pwrite64(r8, &(0x7f00000001c0)="6de6860cac9d60925e6816ffd72599639d019ff8b6711ca4794dfd34f7d8c5e00adb47afa17f10c0b3a2c6f3a603c260ab5e049652adbb4c485a33506e4133f392035bc45ac679e88ae733045fc954ccb4c486798621bc9355cb86bb40ab24aeea0437cf01939318b3c3d2f0e1a47d70e9959c684802812381d5cc126938ec6e80cf581e6fe29e46b17e11ca0112c44932245f72bd645df1021b92806037c17abbdc12", 0xa3, 0x0) r9 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x11, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) getrandom(&(0x7f0000001580)=""/154, 0x9a, 0x3) 08:08:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xffffffffb46e6f01, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={'teql0\x00', 0x5}) getsockname$netlink(r4, &(0x7f0000000000), &(0x7f0000000b40)=0xc) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@local, @in6}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) fcntl$getown(r0, 0x9) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000980)) sendmsg$netlink(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[]}, {&(0x7f00000003c0)={0x14, 0x39, 0x400, 0x70bd25, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}, {&(0x7f00000001c0)={0x10, 0x2f, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f0000000600)={0x10, 0x23, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x4, &(0x7f0000000a00)=[@cred={0x20, 0x1, 0x2, 0x0, r5}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}], 0x40}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b00)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000939ff4)) epoll_pwait(0xffffffffffffffff, &(0x7f0000dc7fc4), 0x0, 0x0, &(0x7f0000dc7000), 0x8) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0)=""/193, &(0x7f0000000080)=0xc1) 08:08:14 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe0000000, 0x100, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x10000, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 08:08:14 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0xfffffffffffffffc) r2 = inotify_init1(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x2, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 08:08:15 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000030a43ba5d8060000000060001000029ec2400020cd37ed01cc0730ec279b295bf4042d1", 0x4c}], 0x1}, 0x0) 08:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = dup(r1) recvmsg(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001580)=""/106, 0x6a}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000100)="05", 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) 08:08:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x7) 08:08:15 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000009040)=[{{&(0x7f0000007880)=@xdp, 0x80, &(0x7f0000008940)=[{&(0x7f0000007900)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000008f00), 0x0, &(0x7f0000008f80)=""/165, 0xa5}}], 0x2, 0x100, &(0x7f00000090c0)={0x77359400}) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x99b3) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setrlimit(0x7, &(0x7f0000000000)) inotify_init() 08:08:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x80000) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x39c, 0x0) 08:08:15 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0xfffffffffffffffc) r2 = inotify_init1(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x2, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 08:08:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe0000000, 0x100, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x10000, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 08:08:15 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x10000101840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000140)) 08:08:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/38, &(0x7f0000000180)=0x26) pipe(&(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') pipe(&(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000400)={'bond_slave_1\x00'}) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) geteuid() getresgid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000001300)='./bus\x00', &(0x7f0000001340)='fuseblk\x00', 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB=',max_read=0x0000000000000000,blksize=0x0000000000001400,\x00']) flistxattr(r0, &(0x7f0000000300)=""/4096, 0x1000) r3 = socket(0xa, 0x2, 0x0) pkey_alloc(0x0, 0x0) ioctl(r3, 0x9, &(0x7f00000002c0)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000140)=0x70) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc)=0x2, 0x4) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r2, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x200, 0x4) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) [ 338.587819] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 08:08:15 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x10000101840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000140)) 08:08:15 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x10000101840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000140)) 08:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = dup(r1) recvmsg(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001580)=""/106, 0x6a}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000100)="05", 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) 08:08:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0xfe61) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvmmsg(r0, &(0x7f000000e180)=[{{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006f00)=""/124, 0x7c}], 0x1, &(0x7f000000a080)=""/4096, 0x1000}}, {{&(0x7f000000c440)=@hci, 0x80, &(0x7f000000c6c0), 0x25f, &(0x7f000000c700)=""/9, 0x9}}], 0x2, 0x0, &(0x7f000000e2c0)={0x77359400}) sendto$inet6(r0, &(0x7f00000000c0)="040300000100000000000000c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406136fcfff0500000000000000c7a67e4b98a35d72", 0x4a, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x4, @dev}, 0x1c) 08:08:15 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x10000101840) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000140)) 08:08:15 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0xfffffffffffffffc) r2 = inotify_init1(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a80)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x2, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 08:08:15 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe0000000, 0x100, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x10000, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 08:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r2 = dup(r1) recvmsg(r1, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001580)=""/106, 0x6a}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000100)="05", 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) 08:08:15 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:15 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x2000000000000082) ioctl$LOOP_SET_FD(r0, 0x127d, 0xffffffffffffffff) 08:08:15 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:15 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="cedf699688aaa782ec9bb947e4f4d81d549b", 0x12}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000540)='./file0\x00', 0x20000, 0x80) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) write$selinux_access(0xffffffffffffffff, &(0x7f00000003c0)={'system_u:object_r:console_device_t:s0', 0x20, 'unconfined', 0x20, 0x3}, 0x46) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="48000000bc2fd9af91e46f3b27017122f16e06958645e3362e61371c6cbdbd56906d69ebcfac38da345c48bfc879e0482be516a0a40ffcb0db961ad7248c2e2f2094ffbc2913c68c7d4a081be95cbb87a0084da939221e2bc8292cec059abc58a2591d43a71e585c8b119569a72a87d97c90e17e575f9d2dc0663d2d592bdac25ab91d6aafae67", @ANYRES16=r6], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r3, r4, r5}, 0xc) fcntl$getflags(0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x181000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000440)={0x2, 0x60}) pread64(r7, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg(r8, &(0x7f0000000980)={&(0x7f0000000580)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc(blowfish))\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000000940), 0x0, 0x80}, 0x4) sendmsg$nl_route(r8, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r7) 08:08:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) 08:08:15 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe0000000, 0x100, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x10000, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 08:08:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000280)='./file0\x00', 0x19c) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6}}, 0x14) r2 = dup2(r1, r0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756d") 08:08:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fchdir(r0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 08:08:15 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/235, &(0x7f0000000080)=0xeb) 08:08:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r1, &(0x7f0000000000)="c1", 0x1, 0x8000, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f0000000240)="58325d8cc52b3af7b67516089928dd", 0xf, 0x0, &(0x7f0000e81ff0), 0x10) 08:08:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fchdir(r0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 08:08:16 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:16 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) 08:08:16 executing program 2: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:16 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/235, &(0x7f0000000080)=0xeb) 08:08:16 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000440)=0x14, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228332e86baa97788319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe91cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f5609", 0x0) syz_open_pts(0xffffffffffffffff, 0x480000) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x3c847480}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) syz_open_pts(0xffffffffffffffff, 0x180) getsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f0000000240), &(0x7f0000000340)=0x4) sync() [ 339.557928] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) [ 339.565050] FAT-fs (loop1): Filesystem has been set read-only [ 339.571823] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) [ 339.580003] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) [ 339.589913] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) 08:08:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fchdir(r0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 08:08:16 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/235, &(0x7f0000000080)=0xeb) 08:08:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r1, &(0x7f0000000000)="c1", 0x1, 0x8000, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f0000000240)="58325d8cc52b3af7b67516089928dd", 0xf, 0x0, &(0x7f0000e81ff0), 0x10) 08:08:16 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0xc) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x0, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, r5, r6}, 0xc) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x0, 0x6, 0xffffffffffffffff, 0x101, 0x6, 0x154, 0x7fff, 0x101, 0x0, 0x0, 0x100000000, 0x400, 0x0, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, 0x0, 0xc, r1, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0xff) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES64=r7], 0x3b, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5"}) [ 339.640097] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) [ 339.673431] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000410) 08:08:16 executing program 7: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x3, {{0x2, 0x0, @remote}}}, 0x10) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa02, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 08:08:16 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000440)=0x14, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228332e86baa97788319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe91cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f5609", 0x0) syz_open_pts(0xffffffffffffffff, 0x480000) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x3c847480}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) syz_open_pts(0xffffffffffffffff, 0x180) getsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f0000000240), &(0x7f0000000340)=0x4) sync() 08:08:16 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/235, &(0x7f0000000080)=0xeb) 08:08:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r1, &(0x7f0000000000)="c1", 0x1, 0x8000, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f0000000240)="58325d8cc52b3af7b67516089928dd", 0xf, 0x0, &(0x7f0000e81ff0), 0x10) 08:08:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fchdir(r0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 08:08:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000280)='./file0\x00', 0x19c) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6}}, 0x14) r2 = dup2(r1, r0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756d") 08:08:16 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x1b, &(0x7f0000000140), 0x1b5) 08:08:16 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000440)=0x14, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228332e86baa97788319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe91cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f5609", 0x0) syz_open_pts(0xffffffffffffffff, 0x480000) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x3c847480}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) syz_open_pts(0xffffffffffffffff, 0x180) getsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f0000000240), &(0x7f0000000340)=0x4) sync() 08:08:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r1, &(0x7f0000000000)="c1", 0x1, 0x8000, &(0x7f0000000080), 0x10) sendto$inet(r1, &(0x7f0000000240)="58325d8cc52b3af7b67516089928dd", 0xf, 0x0, &(0x7f0000e81ff0), 0x10) 08:08:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f00000001c0)=""/174) 08:08:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 08:08:16 executing program 0: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000180)) socket$l2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x13) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c4", 0x5e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:16 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000440)=0x14, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)="008159a7811ff08a4c2ef26daf582a97c324824e153a4cb2c32228332e86baa97788319615b3c5c0ef621d910522a14631a3ba1b92da6a2c5623f76100951ed31d8ce579a26d20ede818e860e27ea2225c7794751c060f1fa1ceab21a9f0fc8eb562733bda3bbc1c5f450104742581f0cda42698c54fba8caf9ad0562f9961e5ad7522b6d558e77bc4aaaf8ee60f95c99744b456819133a2991faf1dbc02dd61af8d9a388798e1a674324e84b8de7d9890b25fe91cf06a3be7ce49b4cdd3c7866fc088afe449cf54904820cb2c41ad6f5609", 0x0) syz_open_pts(0xffffffffffffffff, 0x480000) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000000)={0x3c847480}) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfe23) syz_open_pts(0xffffffffffffffff, 0x180) getsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f0000000240), &(0x7f0000000340)=0x4) sync() 08:08:16 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000040)) 08:08:16 executing program 2: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:16 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="130000006f01000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 340.200080] 9pnet_virtio: no channels available for device (null) 08:08:16 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) [ 340.253135] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 340.280911] FAT-fs (loop6): Filesystem has been set read-only 08:08:16 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@empty, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0xffff8000, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 08:08:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="39ace4933d18a88884ded724e59cc1948eb4fb93640a9809759dd93128b87d62d345979b8567012badeaf4ecc80ef2f8414cb4addb9167d71aea9201b7cd61b00dc8042b18", 0x45, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 340.339710] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 340.375485] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 340.414221] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 340.440702] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) 08:08:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000280)='./file0\x00', 0x19c) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6}}, 0x14) r2 = dup2(r1, r0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756d") 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 08:08:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) [ 340.796806] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 340.853745] FAT-fs (loop6): Filesystem has been set read-only 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 08:08:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) [ 340.914357] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 341.101869] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 341.132606] FAT-fs (loop6): Filesystem has been set read-only 08:08:17 executing program 0: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000180)) socket$l2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x13) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c4", 0x5e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 08:08:17 executing program 2: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 08:08:17 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) [ 341.178821] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) 08:08:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="39ace4933d18a88884ded724e59cc1948eb4fb93640a9809759dd93128b87d62d345979b8567012badeaf4ecc80ef2f8414cb4addb9167d71aea9201b7cd61b00dc8042b18", 0x45, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) 08:08:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000540)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/loop-control\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x50, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x0, 0x1008001}, {0xfffffffffffffffd, 0x8ae}]}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r6 = request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000700)="fc98f93c4380012577913e8dc1574b4f9d6df8ae0e3d9edff706a6e4091fd3624885483f85db0eb3cf0971a82f8c8b342f9dcac64342929b441eda19d4e007b39ff8bf33db68938f7ce0a1d165dda65253cf52ad094e55e372a6955d8316176648", 0x61, r6) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='pstore\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x9, 0x4}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000003c0)=""/12) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x7, 0x100000001, 0x8, 0x0, 0x2, 0x800, 0x0, 0xfffffffffffffffa, 0xa3, 0x0, 0x20, 0x0, 0x0, 0x2, 0x5, 0x4355, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1, 0x400, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0x0, 0x8, 0x2, 0x3, 0xe3f0, 0x8000, 0x6, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0xff, 0x6, 0x7}, r7, 0x0, r0, 0x8) accept4$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @rand_addr}, &(0x7f0000000480)=0x10, 0x800) [ 341.404203] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) [ 341.455308] FAT-fs (loop6): Filesystem has been set read-only [ 341.490453] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006500) 08:08:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:18 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 08:08:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000280)='./file0\x00', 0x19c) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0x0, 0x0, 0x6}}, 0x14) r2 = dup2(r1, r0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000001340)="c2fe2b219e01a0eda0077fdb1a6b4f469643d9b01b6b702f1aa5f50e04657f9b109bd206dab2a6333addf9a35795b662d57cbe8a52835af9e58301a388bb5d6b1ec6eca6c866d5d9ea13f797293571e7d3b52894311e8515f78ae397cc69a130cff1e829ec62f6897866399b2a0fa8100985f8b13897e701f62e3462ee78e73eca4e9b24dae9e6e62033aa235ecc756d") 08:08:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') mount(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:08:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') mount(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:08:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') mount(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:08:18 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:18 executing program 0: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000180)) socket$l2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x13) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c4", 0x5e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:18 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') mount(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 08:08:18 executing program 2: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX]) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f60702d9201cc1b896ea0000000000000000000000000000003880c72d"], 0x1e) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180), &(0x7f00000021c0)=0xc) stat(&(0x7f0000002200)='.\x00', &(0x7f0000002240)) 08:08:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="39ace4933d18a88884ded724e59cc1948eb4fb93640a9809759dd93128b87d62d345979b8567012badeaf4ecc80ef2f8414cb4addb9167d71aea9201b7cd61b00dc8042b18", 0x45, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 08:08:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b2e66cc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x129}, 0x100) 08:08:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@sco, &(0x7f00000003c0)=0x80) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x40, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x1, 0x0) 08:08:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:19 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:19 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b2e66cc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x129}, 0x100) 08:08:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) restart_syscall() 08:08:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="39ace4933d18a88884ded724e59cc1948eb4fb93640a9809759dd93128b87d62d345979b8567012badeaf4ecc80ef2f8414cb4addb9167d71aea9201b7cd61b00dc8042b18", 0x45, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 08:08:19 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b2e66cc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x129}, 0x100) 08:08:19 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b2e66cc60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff"], 0x1f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x129}, 0x100) 08:08:19 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregs(0x3, r1, 0x0, &(0x7f0000000000)=""/38) 08:08:19 executing program 0: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000180)) socket$l2tp(0x18, 0x1, 0x1) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) creat(&(0x7f0000000280)='./bus\x00', 0x13) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e003ac13a78b54f2553487882f6865a6de0c7aa6d05818e7fb5ec432d2b13c4", 0x5e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000200)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, 0x10, 0x300, 0x0, 0x25dfdbfb, {0x11}, [@generic="da38a24ebaa35b3e5938969e027b93d89b263ef258754dc290e443e7e43183859d7a7c08f2761ab12397463d"]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) 08:08:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) restart_syscall() 08:08:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) restart_syscall() 08:08:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4c, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, 0xe8) 08:08:19 executing program 5: timer_create(0xd, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) 08:08:19 executing program 5: timer_create(0xd, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) 08:08:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) restart_syscall() 08:08:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) execveat(0xffffffffffffffff, &(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000280)='/selinux/enforce\x00', &(0x7f0000000300)='posix_acl_accesswlan1usermd5sum\x00', &(0x7f0000000340)='/selinux/enforce\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='}*^\x00', &(0x7f0000000400)='net/ip_mr_vif\x00', &(0x7f0000000440)='net/ip_mr_vif\x00', &(0x7f0000000480)='nodev/%]\\wlan0\x00'], 0xc00) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)="8f3a7593d8b8e655ae2e8c530617e51474f4b761b055d7055859547799e2d1f336a48b72e9b6df0cee8a14c33d5416f22dde032698ba590dd39d5f6ec05ded06a19f8c7b2f2d74196956ba0e683a0a663355e5aa2633503987a46dc9e91189b5ad5f690ded6ac6152838e25697511580abdee58cea421956cedb1456c905", 0x7e, r1) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:20 executing program 5: timer_create(0xd, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) 08:08:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:20 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0x5) setresuid(r2, r2, 0x0) setresuid(0x0, 0x0, 0x0) 08:08:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@enc_lim, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, 0x58) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@routing, 0x8) 08:08:20 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000d000800e0020000b89c0fa203000000a71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b06ec2a08594e391798e4fc2959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda87000000fa02000100000000f7ffff020080ffffff05000500000000000a00000000000000fe8000000000000000000000000000ff0000f8ff00000000"], 0xd8}}, 0x0) 08:08:20 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) inotify_init() r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000340)) 08:08:20 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x4, &(0x7f00000001c0)) mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x6020, 0xffffffffffffffff) quotactl(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, &(0x7f0000000340)) 08:08:20 executing program 5: timer_create(0xd, &(0x7f0000000080)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)) 08:08:20 executing program 6: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/189, 0x2) 08:08:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:20 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:20 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x80000004, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0xfffffffeffffffff}) 08:08:20 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x10000000000003) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000004c40), 0x0, &(0x7f0000004cc0)}}, {{0x0, 0x0, &(0x7f0000005000), 0x0, &(0x7f0000005040)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 08:08:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) [ 344.335364] IPVS: Creating netns size=2536 id=64 08:08:21 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:21 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:21 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:21 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) inotify_init() r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000340)) 08:08:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:21 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, &(0x7f00000010c0), 0x14) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000001180)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8906, &(0x7f0000000080)={"626f6e645f7391a576655f3000"}) 08:08:21 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:21 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:21 executing program 3: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) [ 345.466999] pktgen: kernel_thread() failed for cpu 0 [ 345.472149] pktgen: Cannot create thread for cpu 0 (-4) [ 345.478968] pktgen: kernel_thread() failed for cpu 1 [ 345.484086] pktgen: Cannot create thread for cpu 1 (-4) [ 345.489876] pktgen: Initialization failed for all threads 08:08:22 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:22 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f4776710") ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)) rmdir(&(0x7f00000006c0)='./file0\x00') setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000700)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000940)) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000900)={0x1c, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000e630c400100000004000000000000000c630000"], 0x47, 0x0, &(0x7f0000000880)="2b70d75846a4832b0a0e7fa84806a5548c3b722475eda38aeada010247964b0f2ec0ad03113902e2b08672a9235b9374ffac4ce6d75bc1117064f5fbc9b6c117e14fec2c7ca340"}) 08:08:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:22 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) fchown(r1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x208200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) 08:08:22 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) inotify_init() r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000340)) 08:08:22 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 08:08:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) 08:08:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:22 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0xb) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x0, 0x80}) fcntl$setlease(r1, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000200)) [ 345.961752] binder: 24574:24575 got transaction to context manager from process owning it [ 346.013648] binder: 24574:24575 transaction failed 29201/-22, size 0-0 line 3004 08:08:22 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) inotify_init() r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000340)) 08:08:22 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_procfs(0x0, &(0x7f00000000c0)="617474722f7072c2445b") [ 346.056684] binder: BINDER_SET_CONTEXT_MGR already set [ 346.077996] binder: 24574:24579 ioctl 40046207 0 returned -16 [ 346.090869] binder_alloc: 24574: binder_alloc_buf, no vma [ 346.097283] binder: 24574:24575 transaction failed 29189/-3, size 0-0 line 3136 08:08:22 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_procfs(0x0, &(0x7f00000000c0)="617474722f7072c2445b") 08:08:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) [ 346.102789] binder_alloc: 24574: binder_alloc_buf, no vma [ 346.102808] binder: 24574:24585 transaction failed 29189/-3, size 0-0 line 3136 [ 346.105644] binder: release 24574:24579 transaction 77 out, still active [ 346.105845] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.135825] binder: send failed reply for transaction 77, target dead [ 346.237193] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.308416] IPVS: Creating netns size=2536 id=65 08:08:23 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_procfs(0x0, &(0x7f00000000c0)="617474722f7072c2445b") 08:08:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) [ 346.478678] IPVS: Creating netns size=2536 id=66 [ 346.526150] binder: 24607:24614 got transaction to context manager from process owning it [ 346.538921] binder: 24607:24614 transaction failed 29201/-22, size 0-0 line 3004 [ 346.558406] binder: release 24607:24614 transaction 82 out, still active [ 346.605844] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.611534] binder: send failed reply for transaction 82, target dead 08:08:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_procfs(0x0, &(0x7f00000000c0)="617474722f7072c2445b") 08:08:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086610, &(0x7f00000000c0)) 08:08:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:23 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) fchown(r1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x208200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:23 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) [ 346.729051] EXT4-fs warning (device sda1): ext4_resize_fs:1884: can't read last block, resize aborted [ 346.787981] binder: 24631:24636 got transaction to context manager from process owning it [ 346.812049] binder: 24631:24636 transaction failed 29201/-22, size 0-0 line 3004 [ 346.831557] binder: release 24631:24636 transaction 85 out, still active [ 346.867730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24637 comm=syz-executor4 [ 346.893715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24637 comm=syz-executor4 08:08:23 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/91, 0x5b) 08:08:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) 08:08:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}}], 0x0, 0x0, &(0x7f00000009c0)}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 08:08:23 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) pread64(r0, &(0x7f0000000000)=""/32, 0x20, 0x0) [ 346.907485] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.907516] binder: send failed reply for transaction 85, target dead [ 346.960222] binder: 24651:24656 got transaction to context manager from process owning it [ 346.960235] binder: 24651:24656 transaction failed 29201/-22, size 0-0 line 3004 [ 346.962098] binder: release 24651:24656 transaction 88 out, still active [ 346.982837] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1, syncid = 4, id = 0 [ 347.039681] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.039713] binder: send failed reply for transaction 88, target dead [ 347.481120] pktgen: kernel_thread() failed for cpu 0 [ 347.486347] pktgen: Cannot create thread for cpu 0 (-4) [ 347.491801] pktgen: kernel_thread() failed for cpu 1 [ 347.497437] pktgen: Cannot create thread for cpu 1 (-4) [ 347.502833] pktgen: Initialization failed for all threads 08:08:24 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:24 executing program 2: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x823}, 0x14}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0x338) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0x3) sendmsg$nl_netfilter(r0, &(0x7f0000001680)={&(0x7f0000000080), 0xc, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[@ANYBLOB="301200001000280729bd7000ffdbdf25000000001400", @ANYBLOB="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", @ANYBLOB="26f31412136ef7", @ANYBLOB="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"], 0x1219}, 0x1, 0x0, 0x0, 0x4810}, 0x840) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='locgroup&\'em1^\x00') 08:08:24 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) 08:08:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) 08:08:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:24 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) fchown(r1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x208200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) [ 347.924123] pktgen: kernel_thread() failed for cpu 0 [ 347.943195] pktgen: Cannot create thread for cpu 0 (-4) [ 347.949864] pktgen: kernel_thread() failed for cpu 1 [ 347.955015] pktgen: Cannot create thread for cpu 1 (-4) [ 347.964304] pktgen: Initialization failed for all threads 08:08:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) [ 348.117444] binder: 24672:24684 Acquire 1 refcount change on invalid ref 0 ret -22 [ 348.144209] binder: 24672:24684 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 348.162818] binder: 24672:24691 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 348.172224] binder: 24672:24691 transaction failed 29189/-22, size 0-0 line 3013 [ 348.180280] binder: 24672:24684 unknown command 0 [ 348.180322] binder: 24672:24684 ioctl c0306201 20000040 returned -22 [ 348.276419] binder: 24672:24691 Acquire 1 refcount change on invalid ref 0 ret -22 [ 348.289673] binder: 24672:24691 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 348.313519] binder: 24672:24691 unknown command 0 [ 348.322479] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.336902] binder: 24672:24691 ioctl c0306201 20000040 returned -22 08:08:25 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 08:08:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) 08:08:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) 08:08:25 executing program 2: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:25 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) fchown(r1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r0, 0x208200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_OPEN(r2, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:25 executing program 0: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f00000002c0)={0x830a, 0x3, 0x70000, 0x4, 0x0, 0x6e371b8c}) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = add_key$user(&(0x7f0000002780)='user\x00', &(0x7f00000027c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002800), 0x0, 0x0) keyctl$get_security(0x11, r6, &(0x7f0000002900)=""/213, 0xd5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) utimensat(r5, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x172a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002400)={@loopback, 0x200, 0x2, 0x3, 0x2, 0xfa, 0x7fffffff, 0x100000000}, 0x20) inotify_init1(0x80000) [ 349.020432] binder: 24701:24709 Acquire 1 refcount change on invalid ref 0 ret -22 [ 349.053661] binder: 24701:24709 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 349.072082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24698 comm=syz-executor7 [ 349.084176] binder: 24701:24709 unknown command 0 [ 349.084248] binder: 24701:24709 ioctl c0306201 20000040 returned -22 [ 349.089320] binder: 24701:24719 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 349.089335] binder: 24701:24719 transaction failed 29189/-22, size 0-0 line 3013 [ 349.094061] binder: undelivered TRANSACTION_ERROR: 29189 [ 349.627356] pktgen: kernel_thread() failed for cpu 0 [ 349.632625] pktgen: Cannot create thread for cpu 0 (-4) [ 349.641730] IPVS: Creating netns size=2536 id=67 08:08:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:26 executing program 2: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:26 executing program 6: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:26 executing program 0: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) [ 349.751791] pktgen: kernel_thread() failed for cpu 1 [ 349.757908] pktgen: Cannot create thread for cpu 1 (-4) [ 349.778483] IPVS: Creating netns size=2536 id=68 [ 349.857146] binder: 24733:24735 Acquire 1 refcount change on invalid ref 0 ret -22 [ 349.865062] binder: 24733:24735 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 349.878234] binder: 24734:24737 Acquire 1 refcount change on invalid ref 0 ret -22 [ 349.894430] binder: 24734:24737 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 349.901288] binder: 24733:24749 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 349.901302] binder: 24733:24749 transaction failed 29189/-22, size 0-0 line 3013 [ 349.901614] binder: 24733:24735 unknown command 0 [ 349.901642] binder: 24733:24735 ioctl c0306201 20000040 returned -22 [ 349.907039] binder: undelivered TRANSACTION_ERROR: 29189 [ 349.934175] binder: 24734:24748 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 349.941974] binder: 24734:24737 unknown command 0 [ 349.947298] binder: 24734:24737 ioctl c0306201 20000040 returned -22 [ 349.960222] binder: 24734:24748 transaction failed 29189/-22, size 0-0 line 3013 [ 349.979423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=24740 comm=syz-executor3 [ 349.986213] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.076744] IPVS: Creating netns size=2536 id=69 [ 350.265835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 350.280240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 350.341826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 350.360201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 350.418533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 350.432227] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 350.446427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 350.461314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.140540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 351.173301] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 351.179557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.186996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:08:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:28 executing program 5: r0 = getpgrp(0xffffffffffffffff) getpriority(0x2, r0) 08:08:28 executing program 2: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:28 executing program 0: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:28 executing program 6: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x1, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r3, r3, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) fcntl$notify(r2, 0x402, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000400)=""/45) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(r1, 0x4b65, 0x8) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 08:08:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) [ 351.526548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28486 sclass=netlink_route_socket pig=25125 comm=syz-executor4 08:08:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 08:08:28 executing program 6: r0 = socket(0x8, 0x5, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x2, 0x3}}, 0x26) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setflags(r3, 0x2, 0x1) request_key(&(0x7f0000001880)='keyring\x00', &(0x7f0000000080), &(0x7f0000000040)='nodevvmnet1\x00', r2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000300)=""/78, 0x100000132, 0x13) fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r5, 0x7fff) memfd_create(&(0x7f0000000280)='\x00', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x2ee, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x0, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 08:08:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) write$binfmt_misc(r1, &(0x7f0000000300)={'syz1'}, 0xfff0) [ 351.663774] binder: 25133:25148 Acquire 1 refcount change on invalid ref 0 ret -22 08:08:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:28 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socketpair(0x0, 0x0, 0x0, &(0x7f00000009c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 08:08:28 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000080)="582f090000003326ed53712f09000003", 0x10, 0x0, &(0x7f0000000100), 0x10) [ 351.674433] binder: 25137:25141 Acquire 1 refcount change on invalid ref 0 ret -22 [ 351.674530] binder: 25137:25141 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 351.674567] binder: 25137:25141 unknown command 0 [ 351.674589] binder: 25137:25141 ioctl c0306201 20000040 returned -22 08:08:28 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000080)="582f090000003326ed53712f09000003", 0x10, 0x0, &(0x7f0000000100), 0x10) 08:08:28 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000480)=""/180) bind$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x1c) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000006a1b4cd2000000000000000000000000000000000004854656753395779f548cc0cd0194345fa2fec9a8afd2d64877ca290e6971d8536f2887366953cde679c06161b12900024add68508e26e1c58e8d2ad4e7243bd41d7fd2182e2bea0d9bd7d6a2c331b702106ba6f46b44423c8c3d350a721fdb2f85231a9ff74b0c2089b4ac135afff43f76ff0c881dfd1f"]) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200), 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f00000003c0)=""/158, 0x9e) [ 351.675107] binder: 25137:25141 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 351.675235] binder: 25137:25141 transaction failed 29189/-22, size 0-0 line 3013 [ 351.676889] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.710532] binder: 25133:25135 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 351.710661] binder: 25133:25135 transaction failed 29189/-22, size 0-0 line 3013 [ 351.727250] IPv4: Oversized IP packet from 127.0.0.1 [ 351.807019] binder: 25151:25153 Acquire 1 refcount change on invalid ref 0 ret -22 [ 351.807083] binder: 25151:25153 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 351.807161] binder: 25151:25153 unknown command 0 [ 351.807183] binder: 25151:25153 ioctl c0306201 20000040 returned -22 08:08:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f0000004a00)=""/4096) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000001780)='./file0\x00', &(0x7f0000187ff8)='.', &(0x7f0000000480)='rootfs\x00', 0x5010, &(0x7f0000001740)) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r4, 0x9, r0, 0x1) mount(&(0x7f0000001900)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r5 = syz_open_procfs(r4, &(0x7f00000019c0)='net/snmp\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r7 = getegid() fchown(r6, 0x0, r7) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3dfd4e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57dd9b846335e1838e558a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000001740)='net/netstat\x00') ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r8, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) syz_mount_image$iso9660(&(0x7f00000016c0)='iso9660\x00', &(0x7f0000001700)='./file0/file0\x00', 0x7, 0x1, &(0x7f0000001800)=[{&(0x7f00000017c0)="57284b877bc082940ef484b8f87535", 0xf, 0x2}], 0x1000, &(0x7f0000001940)=ANY=[]) fstatfs(r0, &(0x7f00000001c0)=""/216) 08:08:28 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000080)="582f090000003326ed53712f09000003", 0x10, 0x0, &(0x7f0000000100), 0x10) [ 351.812011] binder: 25151:25153 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 351.812111] binder: 25151:25153 transaction failed 29189/-22, size 0-0 line 3013 [ 351.812917] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.965201] binder: 25133:25148 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 351.974477] binder: 25133:25148 unknown command 0 [ 351.992822] binder: 25133:25148 ioctl c0306201 20000040 returned -22 08:08:28 executing program 6: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$netlink(0x10, 0x3, 0x4000000000000009) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 08:08:28 executing program 3: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) socket$inet6(0xa, 0x802, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, 0x0) inotify_init1(0x0) 08:08:28 executing program 0: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000080)="582f090000003326ed53712f09000003", 0x10, 0x0, &(0x7f0000000100), 0x10) 08:08:28 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xc) ptrace$setopts(0x4200, r1, 0x0, 0x0) [ 352.023933] binder: undelivered TRANSACTION_ERROR: 29189 08:08:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x1, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r3, r3, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) fcntl$notify(r2, 0x402, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000400)=""/45) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(r1, 0x4b65, 0x8) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 08:08:28 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3511f9f4}) 08:08:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20800, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 08:08:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r2 = socket$inet6(0xa, 0xffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 08:08:28 executing program 3: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) socket$inet6(0xa, 0x802, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, 0x0) inotify_init1(0x0) 08:08:28 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000100000047e04087"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:28 executing program 3: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) socket$inet6(0xa, 0x802, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, 0x0) inotify_init1(0x0) 08:08:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r2 = socket$inet6(0xa, 0xffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 08:08:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3511f9f4}) 08:08:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20800, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 08:08:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r2 = socket$inet6(0xa, 0xffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 08:08:29 executing program 3: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) socket$inet6(0xa, 0x802, 0x0) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, 0x0) inotify_init1(0x0) 08:08:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x1, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r3, r3, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) fcntl$notify(r2, 0x402, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000400)=""/45) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(r1, 0x4b65, 0x8) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 08:08:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r2 = socket$inet6(0xa, 0xffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 08:08:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3511f9f4}) 08:08:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f000052bff0)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000088e000)={0x0, r2}, &(0x7f0000e98ffc), 0x0) futex(&(0x7f000000cffc), 0x5, 0x80, &(0x7f0000049ff0)={0x0, 0x989680}, &(0x7f0000a2a000), 0x5000000) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=""/135, 0xfffffffffffffe3a) socketpair$inet(0x2, 0x6, 0x7, &(0x7f00000003c0)) futex(&(0x7f0000000380)=0x1, 0x1, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)=0x2, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x139080, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="dd88e7d07cd4eb3118003f71fca0d2580b879771a73cdb6207a2d57faa4b56ccff0fdf1dba3c75bd304278534e659a3a6b8fc870e7fab6d6bff63690cf8d24fc6738cd54ad2973a8b8e3f3312b82844f41444c13c8bb208d2117fb2cd92999c2184ffe32409281cd095a5d7269a43fa720b8dab67088592c0624339d4bcfda77f33db4af297464b4a756cdb3a7b5be310629e60afb6479c321"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) getpeername$unix(r4, &(0x7f0000000080), &(0x7f0000000180)=0x6e) r5 = socket$inet(0x10, 0x80002, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0x6}}}, 0x32) 08:08:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20800, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 08:08:29 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="090000006b0100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200000, 0x0) symlinkat(&(0x7f0000000540)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') 08:08:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3511f9f4}) 08:08:29 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 08:08:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e", 0x9, 0x101}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000008c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000180)=[{}], 0x0, [{}, {}, {}]}, 0xa8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffffffffffffffc, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) execveat(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000440)="706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", &(0x7f00000004c0)='wlan1\x00', &(0x7f0000000500)='self]\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='&+md5sum{\x00', &(0x7f00000005c0)='\x00'], &(0x7f0000000840)=[&(0x7f0000000640)='/selinux/avc/hash_stats\x00', &(0x7f00000006c0)='eth0uservboxnet0ppp1GPL\x00', &(0x7f0000000700)="706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", &(0x7f0000000740)='\x00', &(0x7f00000007c0)='client1\x00', &(0x7f0000000800)='wlan0{#+cgroupselinux\x00'], 0x1100) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) 08:08:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20800, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 08:08:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) [ 352.958075] l2tp_core: tunl 1: fd 5 wrong protocol, got 0, expected 17 [ 352.978879] l2tp_core: tunl 1: fd 9 wrong protocol, got 0, expected 17 08:08:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x1, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r3, r3, &(0x7f0000000340)=0xffffffd, 0x7ffffffb) fcntl$notify(r2, 0x402, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000400)=""/45) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(r1, 0x4b65, 0x8) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x80080) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 08:08:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x99) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/152, 0x98) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, &(0x7f0000000440)={0x30, 0x29, 0x2, {0xffffffffffffffc1, [{{0x8, 0x1, 0x3}, 0x8df, 0xb3, 0xd, './file0/file0'}]}}, 0x30) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = socket(0x200000000000011, 0x0, 0x0) flistxattr(r2, &(0x7f0000000340)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000de00000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3ff, 0x1, 0x80, 0x9, 0x3, 0x3, 0x6, 0x1d4, 0x38, 0x1c3, 0x7, 0x7, 0x20, 0x1, 0xfffffffffffffffc, 0x55d, 0x1}, [{0x7, 0x100000000, 0x2, 0x1, 0x400, 0x6, 0x0, 0x1}], "4efa0a6905cc3faa6ab46d14ae0cdcd0f312fb47860d571c927def48c799045654aa40dda6bc29c353c6a5167cb79ce9176a26b20ae3fa97f64d963b70bc2aeb15ea70540687e93a0c89c1582ba28f2b82bba381060849cb2b6cd235c02928cac3815dee0424b81cc6a4d7f3090e105eab7f37e9c9f905f7efbe8b08e21b1d58dd6ab999a76e720f9394947ca90f0f1296a63340b618e2181abba3da0d86d953eab801dd06984592a98c97896460e5f014f1e573bfc1", [[], [], [], []]}, 0x50e) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400, 0x0) 08:08:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) 08:08:30 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 08:08:30 executing program 1: clock_gettime(0x8000, &(0x7f0000000100)) 08:08:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:30 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811000000000961b71c753e20f81d4649"], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 08:08:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac4b"], 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) sendfile(r1, r2, &(0x7f0000000100), 0x401) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r0, r2, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r1, 0x0) 08:08:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x20000000021) sendto$inet6(r0, &(0x7f0000000000)="1c3fecb5077ca46942206bd511b9a1f34ce3594062a8ce43a0f0b40f", 0x1c, 0x0, &(0x7f0000000180), 0x1c) 08:08:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_to_team\x00', 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00'}) 08:08:30 executing program 1: mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') [ 353.818287] device veth0_to_team entered promiscuous mode [ 353.839828] device veth0_to_team left promiscuous mode 08:08:30 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x99) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/152, 0x98) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 08:08:30 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'io'}]}, 0x4) 08:08:30 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x400000029, 0x80000003) 08:08:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) 08:08:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000040)=0xffffffffffffff4d) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x1916c, 0x9386]) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) flistxattr(r0, &(0x7f0000000140)=""/84, 0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x333f5785) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) [ 354.056819] device veth0_to_team entered promiscuous mode [ 354.062765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 354.090636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 08:08:30 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x11000, 0x3, &(0x7f0000fef000/0x11000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000009) [ 354.102033] device veth0_to_team left promiscuous mode 08:08:30 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 08:08:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 08:08:30 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0xdaed}) 08:08:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 08:08:30 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xa0000007}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 08:08:31 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x9) r1 = socket$key(0xf, 0x3, 0x2) dup3(r0, r1, 0x0) 08:08:31 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x99) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/152, 0x98) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:31 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 08:08:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'io'}]}, 0x4) 08:08:31 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 08:08:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000040)=0xffffffffffffff4d) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x1916c, 0x9386]) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) flistxattr(r0, &(0x7f0000000140)=""/84, 0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x333f5785) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) 08:08:31 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'io'}]}, 0x4) 08:08:31 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 08:08:31 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x2007}) r2 = gettid() signalfd(r0, &(0x7f0000392ff8)={0xffffffffffff0000}, 0x8) rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x2f4, 0x0, &(0x7f0000000180), 0x8) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 08:08:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000600)) 08:08:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000600)) 08:08:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'io'}]}, 0x4) 08:08:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@remote, @broadcast}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x0, @broadcast, 0x0, 0x0, 'none\x00'}, 0x2c) 08:08:31 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x99) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x4, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/152, 0x98) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 08:08:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000600)) 08:08:31 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) creat(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 08:08:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000600)) 08:08:31 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) fstat(r0, &(0x7f0000000140)) 08:08:31 executing program 0: accept4(0xffffffffffffffff, &(0x7f0000001540)=@pppol2tp, &(0x7f00000015c0)=0x80, 0x0) mount$9p_xen(&(0x7f0000001600)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='9p\x00', 0x40042, &(0x7f00000016c0)={'trans=xen,', {[{@fscache='fscache'}, {@aname={'aname', 0x3d, "2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a"}}, {@noextend='noextend'}, {@access_any='access=any'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@version_9p2000='version=9p2000'}, {@access_any='access=any'}]}}) r0 = socket(0x10, 0x2, 0xa) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0xffffffff80000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40fff}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=@getrule={0x14, 0x22, 0x2, 0x70bd26, 0x0, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xa010}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r2, &(0x7f00000000c0), 0x200080000002) 08:08:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000040)=0xffffffffffffff4d) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x1916c, 0x9386]) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) flistxattr(r0, &(0x7f0000000140)=""/84, 0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x333f5785) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) 08:08:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:32 executing program 6: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b882, 0x0) 08:08:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000000)=[{r1}, {r0}], 0x2, 0x0) 08:08:32 executing program 1: r0 = socket$nl_generic(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x88, 0xa, &(0x7f0000000040)=0x100000, 0x2c3) 08:08:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 08:08:32 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x20000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/anycast6\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000140)={0xffffffffffff41b1, 0xad4, 0x0, 'queue0\x00', 0xbc00000000000000}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000200)=""/78) waitid(0x1, r5, &(0x7f00000001c0), 0x8, &(0x7f0000000380)) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) fallocate(r6, 0x11, 0x0, 0x100000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"766574000000000000000000bd6800", 0x43732e5398417f1b}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 08:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r1, 0x531, 0x0, 0x0, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 08:08:32 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r0, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x209, 0x23fe, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) socket(0xa, 0x1, 0x0) 08:08:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="080ed7f854268d6a7ec22747a42a2a687c4e45122247ab6fcab798649e25478cf80671c309c715ecbff07aaf63fe27f87e8cfa", 0x33, 0x7f}], 0x200010, &(0x7f0000000280)={[{@check_relaxed='check=relaxed'}, {@cruft='cruft'}, {@map_normal='map=normal'}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 08:08:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300)={'#! ', './file0'}, 0xb) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 08:08:32 executing program 6: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={"64756d7930008db7d900000000000600", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(r1, 0x40) faccessat(r0, &(0x7f0000000600)='./file0\x00', 0x4, 0x200) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@deltfilter={0x38, 0x2d, 0x210, 0x70bd25, 0x25dfdbfe, {0x0, r3, {0xfffe, 0x5}, {0xf, 0x10}, {0x3, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@pppol2tpv3in6, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/26, 0x1a}, {&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/64, 0x40}], 0x8, &(0x7f0000001a80)=""/173, 0xad, 0x2}, 0xc8a7}], 0x1, 0x42, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000640)={0x9, 0x0, 0x8, 0x3, 0x6, 0x4, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x28, 0x0, &(0x7f0000000140)=[@release, @release, @release, @register_looper, @free_buffer], 0x0, 0x0, &(0x7f0000000280)}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000013c0)}}, &(0x7f0000000180)) 08:08:32 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x1e, 0x201}, 0x14}}, 0x0) 08:08:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) 08:08:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 08:08:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 355.755237] IPVS: Creating netns size=2536 id=70 [ 356.052977] IPVS: Creating netns size=2536 id=71 08:08:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) [ 356.177645] pktgen: kernel_thread() failed for cpu 0 [ 356.182783] pktgen: Cannot create thread for cpu 0 (-4) [ 356.188832] pktgen: kernel_thread() failed for cpu 1 [ 356.193943] pktgen: Cannot create thread for cpu 1 (-4) [ 356.199767] pktgen: Initialization failed for all threads 08:08:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:32 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 08:08:32 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r0, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x209, 0x23fe, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) socket(0xa, 0x1, 0x0) 08:08:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffd, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000040)=0xffffffffffffff4d) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x1916c, 0x9386]) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) flistxattr(r0, &(0x7f0000000140)=""/84, 0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x333f5785) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) 08:08:32 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300)={'#! ', './file0'}, 0xb) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 08:08:32 executing program 6: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={"64756d7930008db7d900000000000600", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(r1, 0x40) faccessat(r0, &(0x7f0000000600)='./file0\x00', 0x4, 0x200) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@deltfilter={0x38, 0x2d, 0x210, 0x70bd25, 0x25dfdbfe, {0x0, r3, {0xfffe, 0x5}, {0xf, 0x10}, {0x3, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@pppol2tpv3in6, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/26, 0x1a}, {&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/64, 0x40}], 0x8, &(0x7f0000001a80)=""/173, 0xad, 0x2}, 0xc8a7}], 0x1, 0x42, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000640)={0x9, 0x0, 0x8, 0x3, 0x6, 0x4, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x28, 0x0, &(0x7f0000000140)=[@release, @release, @release, @register_looper, @free_buffer], 0x0, 0x0, &(0x7f0000000280)}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000013c0)}}, &(0x7f0000000180)) 08:08:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 08:08:32 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:32 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r0, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x209, 0x23fe, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) socket(0xa, 0x1, 0x0) 08:08:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 08:08:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300)={'#! ', './file0'}, 0xb) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 08:08:33 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r0, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x209, 0x23fe, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) socket(0xa, 0x1, 0x0) 08:08:33 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000040)) 08:08:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x40000000000034f, 0x0) 08:08:33 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/215) [ 357.301623] pktgen: kernel_thread() failed for cpu 0 [ 357.306774] pktgen: Cannot create thread for cpu 0 (-4) [ 357.312147] pktgen: kernel_thread() failed for cpu 1 [ 357.317547] pktgen: Cannot create thread for cpu 1 (-4) [ 357.322898] pktgen: Initialization failed for all threads [ 357.428947] pktgen: kernel_thread() failed for cpu 0 [ 357.435584] pktgen: Cannot create thread for cpu 0 (-4) [ 357.441747] pktgen: kernel_thread() failed for cpu 1 [ 357.446897] pktgen: Cannot create thread for cpu 1 (-4) [ 357.452242] pktgen: Initialization failed for all threads 08:08:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000001, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd401000100ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0x408c5333, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) 08:08:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001300)={'#! ', './file0'}, 0xb) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 08:08:34 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:34 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:34 executing program 6: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={"64756d7930008db7d900000000000600", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(r1, 0x40) faccessat(r0, &(0x7f0000000600)='./file0\x00', 0x4, 0x200) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@deltfilter={0x38, 0x2d, 0x210, 0x70bd25, 0x25dfdbfe, {0x0, r3, {0xfffe, 0x5}, {0xf, 0x10}, {0x3, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@pppol2tpv3in6, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/26, 0x1a}, {&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/64, 0x40}], 0x8, &(0x7f0000001a80)=""/173, 0xad, 0x2}, 0xc8a7}], 0x1, 0x42, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000640)={0x9, 0x0, 0x8, 0x3, 0x6, 0x4, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x28, 0x0, &(0x7f0000000140)=[@release, @release, @release, @register_looper, @free_buffer], 0x0, 0x0, &(0x7f0000000280)}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000013c0)}}, &(0x7f0000000180)) 08:08:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000002000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) [ 357.576953] pktgen: kernel_thread() failed for cpu 0 [ 357.582083] pktgen: Cannot create thread for cpu 0 (-4) [ 357.590013] pktgen: kernel_thread() failed for cpu 1 [ 357.595171] pktgen: Cannot create thread for cpu 1 (-4) [ 357.610641] pktgen: Initialization failed for all threads 08:08:34 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:08:34 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x2000000200000800, 0x2}, 0x1c) 08:08:34 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:34 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:08:34 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x4000, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 358.590800] pktgen: kernel_thread() failed for cpu 0 [ 358.595949] pktgen: Cannot create thread for cpu 0 (-4) [ 358.601331] pktgen: kernel_thread() failed for cpu 1 [ 358.606766] pktgen: Cannot create thread for cpu 1 (-4) [ 358.612117] pktgen: Initialization failed for all threads [ 358.717082] pktgen: kernel_thread() failed for cpu 0 [ 358.722220] pktgen: Cannot create thread for cpu 0 (-4) [ 358.730367] pktgen: kernel_thread() failed for cpu 1 [ 358.736533] pktgen: Cannot create thread for cpu 1 (-4) [ 358.741898] pktgen: Initialization failed for all threads 08:08:35 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:35 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:08:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:35 executing program 6: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={"64756d7930008db7d900000000000600", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(r1, 0x40) faccessat(r0, &(0x7f0000000600)='./file0\x00', 0x4, 0x200) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback}, &(0x7f00000004c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@deltfilter={0x38, 0x2d, 0x210, 0x70bd25, 0x25dfdbfe, {0x0, r3, {0xfffe, 0x5}, {0xf, 0x10}, {0x3, 0xffff}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) recvmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@pppol2tpv3in6, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000800)=""/36, 0x24}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/26, 0x1a}, {&(0x7f0000001880)=""/249, 0xf9}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/64, 0x40}], 0x8, &(0x7f0000001a80)=""/173, 0xad, 0x2}, 0xc8a7}], 0x1, 0x42, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000640)={0x9, 0x0, 0x8, 0x3, 0x6, 0x4, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x28, 0x0, &(0x7f0000000140)=[@release, @release, @release, @register_looper, @free_buffer], 0x0, 0x0, &(0x7f0000000280)}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000013c0)}}, &(0x7f0000000180)) [ 358.868180] pktgen: kernel_thread() failed for cpu 0 [ 358.877584] pktgen: Cannot create thread for cpu 0 (-4) [ 358.895928] pktgen: kernel_thread() failed for cpu 1 [ 358.922878] pktgen: Cannot create thread for cpu 1 (-4) [ 358.949889] pktgen: Initialization failed for all threads 08:08:35 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000b40)='/dev/usbmon#\x00', 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000340)=""/150) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) read$eventfd(r2, &(0x7f00000002c0), 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) memfd_create(&(0x7f0000000980)='.[-vmnet0{\x00', 0x2) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000240)={0x81, 0x0, 0x0, 0x7bab}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4c050}, 0x880) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c677245ecae79d579cb", @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 08:08:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x400000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 08:08:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}}, 0x0) 08:08:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) [ 359.196487] IPVS: Creating netns size=2536 id=72 08:08:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}}, 0x0) 08:08:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4000) write$selinux_access(r0, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xffffffd9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 08:08:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) [ 359.446900] IPVS: Creating netns size=2536 id=73 08:08:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[]}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) dup2(r1, r2) [ 359.779737] IPVS: Creating netns size=2536 id=74 08:08:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000380)=""/4096) 08:08:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}}, 0x0) 08:08:36 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:36 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004bc0)={&(0x7f0000000000), 0xc, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendto$inet(r0, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) 08:08:36 executing program 3: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x14000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x25) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001000000000000000010000000002542adde70224ec97def3de389338a28096ce5882ebcf04a9a6a7307e26bee844ff78a854b3309e51b42657c0aca72fe57a16808d827fdf128590e20f9e29704419fb0fd8a0600000000000000f4814510af4b2f7962fd9cc75eaa"], 0x1}}, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000140)=0x6) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="c00003f09787757331c29b27070317c874e508798234c477fe86bb2b6a65", 0x1e, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@local, 0x65, r5}) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r8, 0x0) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r9, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0x10f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x3, 0x9) r11 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1) write$evdev(r11, &(0x7f0000000100)=[{{}, 0x4, 0x100000001}, {{0x0, 0x7530}, 0x698c, 0x7, 0x2}, {{}, 0x8000, 0x941, 0x81}, {{}, 0x5, 0x6, 0x711}, {{0x0, 0x2710}, 0x0, 0x0, 0xe91}, {{0x0, 0x2710}, 0x7, 0x6, 0x1}, {{}, 0x6, 0x1, 0x3}], 0xa8) sendmmsg(r10, &(0x7f0000000240)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="940d342d", 0x4}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x200047fc) sync_file_range(r12, 0x8, 0x0, 0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xf}) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="73108a0620872c179185e7f49c27fc26", 0x10, 0xfffffffffffffff8) 08:08:36 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 08:08:36 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800002, 0x11, r5, 0x0) write$eventfd(r5, &(0x7f0000000040), 0x8) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) 08:08:36 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2000400) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000), 0x1) 08:08:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:36 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000240)=0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000400)={{r3, r4/1000+30000}}, &(0x7f0000000480)) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000100)) sendfile(r0, r2, &(0x7f00000000c0), 0x200080000002) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000440)={{r5, r6/1000+30000}}, &(0x7f0000000540)) getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept(r1, &(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000300)=0x80) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) 08:08:36 executing program 0: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[]}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) dup2(r1, r2) 08:08:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x7f}) 08:08:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x1d, r3}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f0000000340)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000000ffdbdf2500000000080000000000000000000003ae00010000000000003f08000000000011fb68a96a154c23b45cb638ae1771a4a70b6200d86ca6c2cfe73318a8b9a467fe47d1f1ab61c5091862733cd4c90e2ef70652b7e0d038de4ab9a1dfb55b1d21203b1b9c960edec42c6b0ee905dbbccdc5381b24"], 0x1}, 0x1, 0x0, 0x0, 0x24004084}, 0x10) fcntl$setown(r1, 0x8, r5) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1a, 0x16, 0x9, 0x16, 0xa, 0xf6, 0x3, 0x136}) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000680)=0xfe50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x6, @loopback, 0x0, 0x0, 'sh\x00', 0x1, 0x1, 0x7c}, 0x2c) ioctl$KDSETLED(r4, 0x4b32, 0x0) fcntl$addseals(r2, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000700)="34380d1c0d5f613d99da304f3f7f3400e4451461254c55827c364cdf86b33c140fe9f1091366cc04cf4b31d541830966ba25154d7864bb9832d8215836a53751327bb5f0c16b6fe418238f611b586d870103ef7729593c4d2ce213f74413a1677b4897e6879c8c232ae742cc613245f8213e7bbc0898bf4efb71d2ee7c5b8492cd4c0e885f4790582a796c99b37893cf0a0fa6fdc6a069566e20dae201f23146460fd88516586ad987864e1e55b74d2775262bc07ec1e82f781ec10fb0e5e0d448237d1dff8405914e1dbc9c284e2017", 0xd0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xc) perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x8001, 0x4, 0x200020000, 0x9, 0x0, 0x3, 0x10, 0x5, 0x6, 0x37, 0x8add, 0x3, 0x9, 0x0, 0x7, 0x255, 0x2, 0x6, 0x9, 0x6, 0x7, 0x8, 0x75a9, 0x8000, 0x7, 0x8b, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x2, 0x6, 0x3, 0x101, 0x2, 0x0, 0x5, 0x2, @perf_config_ext={0x10001, 0x40}, 0x813, 0x51, 0x800, 0x7, 0x1, 0x1000, 0x6}, r5, 0xb, r6, 0x1) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f00000002c0)={0x3, 0x70, 0x1, 0x3f, 0x3c400000000, 0x40, 0x0, 0x0, 0x1fe, 0x0, 0x6, 0x7f, 0x7, 0x2, 0x192, 0x3f, 0x9, 0x9, 0x1, 0x0, 0x100000002, 0x3, 0x3, 0x14, 0xfff, 0x4c30, 0x4, 0x9, 0x81, 0x1ff, 0x5, 0x1f, 0x5, 0x8, 0x7, 0x3, 0x4f, 0x4000000000000000, 0x0, 0x538, 0x0, @perf_config_ext={0x8, 0x7}, 0x8, 0xff, 0x101, 0x100000000005, 0x8, 0x200, 0x9}, r5, 0x8, r6, 0x2) 08:08:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r0, 0x4b37) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f627573206367726f7570757365725b5b70726f63656d3076626f786e657431657468302d40776c616e31207663616e3000207663616e300020a020207663616e30000ad96e7dd51040c7ddce6b88b25e672b507e8161056db69c6f1cce1c5b4a0d9482b4b533ef6a8a5da9e5959f914108e1019ad89ee9a52833b744d200eb384d9a35548e5c1f5af2ef96f1a7180782d398b9e9c1c1d6ec8a5d9c83ecbc10ba23718ca51f6309b482b10000000000000000000000000000"], 0xbd) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@empty, 0x71, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0xffff, 0x7}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8156663", @ANYBLOB="00062bbd7000fcdbdf251000000020000100080001000a0000000c0007001000000032000000080004004e21000008000400040000000c0003000800010001000000580003001400020076657468305f746f5f6272696467650008000500000000011400060000000000000000000000ffffe000000214000600fe8000000000000000000000000000aa08000800ff000000080007004e23000008000600240e000008000500faffffff3800030008000500ac1414aa08000800ff000000080003000400000008000500ac1414bb14000600fe80000000000000000000000000000a"], 0x2}}, 0x0) 08:08:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:37 executing program 3: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x14000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x25) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001000000000000000010000000002542adde70224ec97def3de389338a28096ce5882ebcf04a9a6a7307e26bee844ff78a854b3309e51b42657c0aca72fe57a16808d827fdf128590e20f9e29704419fb0fd8a0600000000000000f4814510af4b2f7962fd9cc75eaa"], 0x1}}, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000140)=0x6) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="c00003f09787757331c29b27070317c874e508798234c477fe86bb2b6a65", 0x1e, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@local, 0x65, r5}) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r8, 0x0) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r9, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0x10f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x3, 0x9) r11 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1) write$evdev(r11, &(0x7f0000000100)=[{{}, 0x4, 0x100000001}, {{0x0, 0x7530}, 0x698c, 0x7, 0x2}, {{}, 0x8000, 0x941, 0x81}, {{}, 0x5, 0x6, 0x711}, {{0x0, 0x2710}, 0x0, 0x0, 0xe91}, {{0x0, 0x2710}, 0x7, 0x6, 0x1}, {{}, 0x6, 0x1, 0x3}], 0xa8) sendmmsg(r10, &(0x7f0000000240)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="940d342d", 0x4}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x200047fc) sync_file_range(r12, 0x8, 0x0, 0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xf}) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="73108a0620872c179185e7f49c27fc26", 0x10, 0xfffffffffffffff8) 08:08:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x7f}) 08:08:37 executing program 0: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x7f}) 08:08:37 executing program 4: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:37 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2, 0x1, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'lo\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x7f}) 08:08:37 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:37 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[]}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) dup2(r1, r2) 08:08:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 7: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 3: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x14000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x25) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001000000000000000010000000002542adde70224ec97def3de389338a28096ce5882ebcf04a9a6a7307e26bee844ff78a854b3309e51b42657c0aca72fe57a16808d827fdf128590e20f9e29704419fb0fd8a0600000000000000f4814510af4b2f7962fd9cc75eaa"], 0x1}}, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000140)=0x6) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="c00003f09787757331c29b27070317c874e508798234c477fe86bb2b6a65", 0x1e, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@local, 0x65, r5}) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r8, 0x0) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r9, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0x10f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x3, 0x9) r11 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1) write$evdev(r11, &(0x7f0000000100)=[{{}, 0x4, 0x100000001}, {{0x0, 0x7530}, 0x698c, 0x7, 0x2}, {{}, 0x8000, 0x941, 0x81}, {{}, 0x5, 0x6, 0x711}, {{0x0, 0x2710}, 0x0, 0x0, 0xe91}, {{0x0, 0x2710}, 0x7, 0x6, 0x1}, {{}, 0x6, 0x1, 0x3}], 0xa8) sendmmsg(r10, &(0x7f0000000240)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="940d342d", 0x4}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x200047fc) sync_file_range(r12, 0x8, 0x0, 0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xf}) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="73108a0620872c179185e7f49c27fc26", 0x10, 0xfffffffffffffff8) 08:08:38 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:38 executing program 0: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:38 executing program 4: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:38 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @period}}) 08:08:38 executing program 5: r0 = fanotify_init(0x0, 0x0) unshare(0x400) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 08:08:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x200001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000006c0)='/dev/sequencer2\x00') r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000440)=""/186, 0x5f5) gettid() getdents(r3, &(0x7f0000000140)=""/2, 0x450) accept$inet(r0, 0x0, &(0x7f00000000c0)) 08:08:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x721, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_NET_NS_FD={0x8}]}, 0x50}}, 0x0) 08:08:38 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a06000000a8430891120000390008000a000a00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 362.366652] IPv6: Can't replace route, no match found 08:08:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x3}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 08:08:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0xfffffffffffffe89) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[]}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000580)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) dup2(r1, r2) 08:08:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x100000400000002d, &(0x7f0000000140), 0x4) 08:08:39 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") tkill(r0, 0x1000000000016) 08:08:39 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:39 executing program 0: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:39 executing program 3: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x14000, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x25) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000100001000000000000000010000000002542adde70224ec97def3de389338a28096ce5882ebcf04a9a6a7307e26bee844ff78a854b3309e51b42657c0aca72fe57a16808d827fdf128590e20f9e29704419fb0fd8a0600000000000000f4814510af4b2f7962fd9cc75eaa"], 0x1}}, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000140)=0x6) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="c00003f09787757331c29b27070317c874e508798234c477fe86bb2b6a65", 0x1e, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@local, 0x65, r5}) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r8, 0x0) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r9, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0x10f) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x3, 0x9) r11 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1) write$evdev(r11, &(0x7f0000000100)=[{{}, 0x4, 0x100000001}, {{0x0, 0x7530}, 0x698c, 0x7, 0x2}, {{}, 0x8000, 0x941, 0x81}, {{}, 0x5, 0x6, 0x711}, {{0x0, 0x2710}, 0x0, 0x0, 0xe91}, {{0x0, 0x2710}, 0x7, 0x6, 0x1}, {{}, 0x6, 0x1, 0x3}], 0xa8) sendmmsg(r10, &(0x7f0000000240)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000000)="940d342d", 0x4}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x200047fc) sync_file_range(r12, 0x8, 0x0, 0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x20}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xf}) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="73108a0620872c179185e7f49c27fc26", 0x10, 0xfffffffffffffff8) 08:08:39 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:39 executing program 4: socket(0xf, 0x4, 0xc0a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x73, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) capset(&(0x7f0000000000), &(0x7f0000001fe8)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) accept$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) 08:08:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000400)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/138, 0x8a}], 0x1, &(0x7f0000002440)=""/73, 0x49}}], 0x1, 0xfffffffffffffffc, &(0x7f0000002640)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)="f94a1ad5f6a021dcf1be0b814430f7f89f8fed41ea31225bc7c2c34238257d62be1bfe1707fd2008bb4a62a4209e30bbf7bf4671c76ca5a8e66530ea1da3eef80131856899144f4cbc41c7c0d735d759d07c0c2fda03a82abc7ef170405b6415bebee17f0295764363da470f55cfaaf54892a17336460f42719a6d182c3e1f404a42211477e578dfde178e5227049837343114c38a1ebbb40007ffe3e7eba484b0d95ab1dbce60", 0xa7}, {&(0x7f0000000480)="eb5b41a98aea908ad2ba7a75270475034362e036ac211c12b7d96491483acced048240b5bfff8863626858c8ed37eb544dce52b0", 0x34}], 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r0) 08:08:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) 08:08:39 executing program 5: syz_emit_ethernet(0x34, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xfeffffff}, {}, {}, {0x8, 0x57}}}}}}, &(0x7f0000000000)) 08:08:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getcwd(&(0x7f0000000440)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x0, 0x0, 'client0\x00', 0x0, "32c75c8786305ca2", "f650718098258b6070221cf1528486e2c5bebb4fca4873a0be01e873ca0180fa"}) r2 = getpid() sched_getparam(r2, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r4 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="1ee432ed8ba06c8e74bc74b2ed65a0fccc1e9684046973f3c80800741ed6ab647f75b17cd76c7c5f5efe375ec98dddd5beea2fd728348a3f093943f1baf71716fd1f6ff6832d2c1a3867523afb7c800298809e8b7a2f2421bbf5c245a4c9020fe66f9609bfdd15c4f63cc8e8dba41b7743cd31", 0x73, 0x0) keyctl$get_persistent(0x16, r3, r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000fb"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) statfs(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000200)=""/229) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x4000) 08:08:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getcwd(&(0x7f0000000440)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x0, 0x0, 'client0\x00', 0x0, "32c75c8786305ca2", "f650718098258b6070221cf1528486e2c5bebb4fca4873a0be01e873ca0180fa"}) r2 = getpid() sched_getparam(r2, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r4 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="1ee432ed8ba06c8e74bc74b2ed65a0fccc1e9684046973f3c80800741ed6ab647f75b17cd76c7c5f5efe375ec98dddd5beea2fd728348a3f093943f1baf71716fd1f6ff6832d2c1a3867523afb7c800298809e8b7a2f2421bbf5c245a4c9020fe66f9609bfdd15c4f63cc8e8dba41b7743cd31", 0x73, 0x0) keyctl$get_persistent(0x16, r3, r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000fb"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) statfs(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000200)=""/229) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x4000) 08:08:39 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lookup_dcookie(0x1, &(0x7f00000001c0)=""/149, 0x95) sync_file_range(r0, 0x80, 0xf8, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) mount$9p_tcp(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@msize={'msize'}}, {@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}]}}) ftruncate(0xffffffffffffffff, 0x7fff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000f28ff8), 0x100000002) tkill(0x0, 0x13) 08:08:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getcwd(&(0x7f0000000440)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x0, 0x0, 'client0\x00', 0x0, "32c75c8786305ca2", "f650718098258b6070221cf1528486e2c5bebb4fca4873a0be01e873ca0180fa"}) r2 = getpid() sched_getparam(r2, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r4 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="1ee432ed8ba06c8e74bc74b2ed65a0fccc1e9684046973f3c80800741ed6ab647f75b17cd76c7c5f5efe375ec98dddd5beea2fd728348a3f093943f1baf71716fd1f6ff6832d2c1a3867523afb7c800298809e8b7a2f2421bbf5c245a4c9020fe66f9609bfdd15c4f63cc8e8dba41b7743cd31", 0x73, 0x0) keyctl$get_persistent(0x16, r3, r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000fb"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) statfs(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000200)=""/229) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x4000) 08:08:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) getcwd(&(0x7f0000000440)=""/91, 0x5b) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x0, 0x0, 'client0\x00', 0x0, "32c75c8786305ca2", "f650718098258b6070221cf1528486e2c5bebb4fca4873a0be01e873ca0180fa"}) r2 = getpid() sched_getparam(r2, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r4 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="1ee432ed8ba06c8e74bc74b2ed65a0fccc1e9684046973f3c80800741ed6ab647f75b17cd76c7c5f5efe375ec98dddd5beea2fd728348a3f093943f1baf71716fd1f6ff6832d2c1a3867523afb7c800298809e8b7a2f2421bbf5c245a4c9020fe66f9609bfdd15c4f63cc8e8dba41b7743cd31", 0x73, 0x0) keyctl$get_persistent(0x16, r3, r4) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="000000000000fb"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8) statfs(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000200)=""/229) syz_open_dev$ndb(&(0x7f0000000500)='/dev/nbd#\x00', 0x0, 0x4000) 08:08:40 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(0xffffffffffffffff, &(0x7f0000000180)=""/11, 0x3a2) epoll_create1(0xfffffffffffffffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x18, 0x0, 0x1) connect(r2, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000f4, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./bus\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000200)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) readlink(&(0x7f0000000140)='./bus\x00', &(0x7f00000002c0)=""/115, 0x73) mlockall(0x0) ftruncate(r3, 0x8200) mmap$binder(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9}, 0x10) 08:08:40 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x800) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x5}, 0x1c) socketpair(0x4, 0x0, 0x8, &(0x7f00000000c0)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000000c0)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x1e296c7) ioctl$fiemap(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x100000000}) 08:08:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="0626fc8e5de5a272d59b81bbcd0459f7162148f8c6c7ea9af500b88d6713736c6c011769b08cd0167fa4326a780ac5f2ea9d01f997d6d3600581f10964b9758176a7abfd248e4ca62310faf872570a3fba6ce75ef00a8d154b8e6bcf549a12cc5f29ac8c8e7f0f8837097000178b2b7c1fd947277218a9440dae42091b1a939b14646543aa440dbe9a5fa0afdba0879948feb9ef15ca0b2b7a02e73c491d22d7ff8eb733d1ed0b77a595a65fb3aa34f52ac6e95c95670ba111bee2f70cd1c7fcd6eec9d53eb99cab5548f814b57e0d8cfff1100a7553fcfb9475d47d7e4f67f30d9aa342cdb34844a981524c506ced526647afb47c05c53c67954f3f5f49f4f94ee96ae07fd8ec8faa14b4040e8c3492c36ec590c6c4f4b8563b1371c51a83d7e52d2967f33622d0daccc3e088fbf5c754efbb23db0362bfdfa8c1ecdd6991d2149ea5fc8801c674722c03418aa5da5279b0a4da0a6890bea1b9898703cc037a9c5f0e939a55ee4bd99b7bd90cf4002e945ada9f96063dd0f83b1356882cb59fbd5f240d1072ce91d2b8a3fe1f3761d79d6460dac3e2e7c81394e256a90f61bbb396a03b020cff35c800ed9cf1c290feb4b45b284bf9fb675f16564b98d2b29e61920efea4d6f4a99aca023bc1169d95544fc6531aa37bf83c25fdc9ac160789543c5e5da0d886a6b63bcd7090151af37b69460197d539084b90aa8a3e765c1b5ad174d6b2568453da295c186b8aff52ce75374e69604835ab1309f818d9ace5d69a66b7eb1497958b8a9a111bfc9f82e9c885ba0f1d7b30a1a1abc6685b5287bdc82528e58f14b87801e76777c9dfad4f9063b12dfd1e2f6d74f348faaf28e178763e02c0acdb65592375578b5cc41a9be558d45a85efe44b9128e2ed7f606c2facc48b2b661dbd742ba68c614e1e9f3dbf58bbe3e4d2d412c3c107b795b8d87e496285690f890bd80e8c55adb34f1b279bf491458f224bc333d04236038ef0276040eaa85a813371cf166ed7c44fd177a9b980174d1a0258dcd41e5654b2b1f9b993709727611557ddd4d86a33af4f870d2c7328ac0301a99e78178eb2ec1a82329d18efa24cdf9ef2ef5e35736b87e2442e0a3dbef79611bc2168e93386d540974a7608060b9d7da427bf772565abd6e6a5dc0ae70f2b0b6008196083f0ac1d8c0a536d576225b2f3eefb3355adb8ce6d7da22dabcc7c4dc74146b16bc22d96ba70e2891a8dc844227901d42f41ec4f3d0605c6b46531a16d943a710f34a947c54c4c0b7d55cab10f72b1dee346b55cebcf9f8f8e26fc65351784f5f321333ee2bce1bdaa58450016054cad91e7328823236cedf9ce2ac562959022b12dec7b362f8fe633dbfbe73f0ddc363632224b0200d7f1e62b7a6f84269f9a8c640c309cb6caf3e6deedbafbdaf455b72b4f16599457537ff075a93a337ee8cbef63e628482e8028e2cc01973a6ad91fb1a0cede5be811eb0aabf6f43e8830e711cd19f043d2e03267916014f8e27f87c8db2506eb641983ff47c37b6dd4d57eaeb9e8354446b4918ec567d9d1982e7a776b16648ea229a760aeb55d7e2c718f71088943432ff8b2fea6a5aadfacd0b1bd90a2ce08da43d24f39dc4d1b91da80141787b6f5f1195d4af0bc3c7eb03711921d71cd7f5c6986aef76c5cd5da0c306a047e8213b42fa4469efe4d9d8e4dd5a171c3a293e9dfdbdac6baf45e00fbd57360a8c725e418c95f284e3ab921ede6cbc9d1d40a8a14d618268c0f21fb5b97a361ce0f8e2b3e0fa39fa5151188eeb82ba1cc89589aafc6baf1b17c0391890e8faa9878dffd67dc8bc8833690e03137e617fedbba8ebea273a600d2d9716d6710d9010ec80343931e7b7b0d62154d7fb88976d3715a20fb34bf6e35334e373239c194b977828c7b9956249854d80884ce36c714a86cf3b8923764e0f05f4b1b94f99eb37d7e447686fea0a5bbb3a0dd17534cb74d81eeef481063c613c9e05787fe28ed4411e14f70ccdd030c92b7402cebfd2c92ffd929895551c555df3327beb0aa7c21edb3ccab61eb5a57082fbae93972fb244160fc2094653f934ffa1002382c34851c036ca41ee834f5322f3cc1c39eafcceb997dfb0095e3752b30218f128e1e2016076aa0c935fec100dea24dff4d9daf1dba650c09d5bc9a067b10eb6a83886a1544070bbb07b7c9b023714018cdbce5ccf73506502b19c6b2915e23624d2d6aa0c1999e5ae50dae10a8a08a5cdc01e6bae96e0d8d00a1acfca1b18ce9262d9e6441fee9efbb4829890663814f1b2810ca027cf1429157163da3f8e7b45f10432994d58494ce9f4aca7ffdbc63d7fa9c8e6a4f217cf3df2eec9ab1ab3044908a2eb35681a9255ba99350a932ac0413525e95e09633484bd8e21066fa14204173479168eff12e225e8359ab93d414391f4a94147b61be6987c998a1c2727cb52b1cf35fa3c53e45ec6400b7a0a506350fc8ef52a5816c04c6d0b24453497993a1e649e36eb83c1394ac3cc33f01e00d7a8a9cb6610c250bd9cd3048a7cb816152dfc101030a56724be8db1d82af0c17714af11fcec6af65b7c58697d1e9e0f2a1fd96565e558ae43ab3995c28f53658b87e76dac02a6a070809a84b01596b6a2d25c98d0eb2a311299bb5cd5259727ec74d2afbf09a6bbedab297960e1ac8fa2677a68d457579223847748a0fe68f199e01cc087c8466a810b83290d6bd72a0fde02288cb9c8956f47b6c523b2204b5ebaa2ae716efde58a9e0c5896bc7667b96dfda2e37bbcb9c23e166df9cc229c9ad66ff23a053d21e82aa9feea4328891b863c01a131c07791c27a6aff50f2aca37190c3c6f068c520fcdbb87b5c8934b46f0175f1f838479967d10df2f51750b937a0fd338c07d91f2c8d3fa73e97e01fa2e5648174c667d1409881a8119c7a5a2b2dce1956949e9c246f8de55aee3913475b7963db7faa597e701485a7098acde3a7b9156f338ff106bd4286fb613566ebfe816a3f6292b07e7acf54b4ff71b87e78ad596e36f3e18a5aca137d6e1dd940c5536b7f851346efe23d8aedbd7adc71dadacdd718f3fd4c9a698ed5c14f9ba609a6a62629214b9b858bdecb3bf585ae74f3016cc3e3653962cf83c614fa21a2ca913d6d13808e1af4447d987f07645985bcc70c913e1d9c7d94e93fbd26df2423c84b86ef21ce901a75b517b2c242022b3e29706fb3565b6d952e039a0b5f8ea708de6956135e56076ee34badce5a9dbd1ae9267cf5d5ba7e30bf44f92e85324e3ffc566e2dc154c7367cf87239d4c8f43d1a9d5b6ee46acaa4a8dfecff2c295127fa7d4af364dc3fe98845ce3f25a23c75d17aabbc0754a2b5591d3033993271dea499207ccac4c2e132a50c48ee10b764a23c90102f9382f53c1ccb049fb49e88de0ec56bb26f4c22f5143ed5327852b23fd665e09faf495f5c28ece78ab5e730b026855c9f36d26ce8e23b5cc78303b5b95cd699b1e61045a16581dec7d24755de3badd67d208647f52aedf16f0452899ae428f13bb79455262a18216eeeb26a141e9eb4b294e52e9352315716fbe4ab9091f1703d51b917e18c41b290543aa7e7f205df0b0d1091474e4ef8b5f22d2867cc4ed0b15aae9e1b69a3672c58409096a5e03f23fc18680cd1d19404f5348835297856486b43b17995719db010da956edb04fd216ed5c9f5ab7c8060cced282853326bf03094ab36117a82ae37182e6e09c23513e86295aa606df97b4a3fb56aac724fa958047a1fda951bfbc38538d968a47150b8152b16c887252fcd72a7ef72ad618011ed218de34d521c8de1c69daf80cf5f0fb3cef665a3bacb226f0cafe3a686634c7969685a17a238c6047de51bef87182ca574faa0d73a5d407fa0b4052f8f60c7faa9b55338c7323457cdf920077fe11df52f42d394e4a349c980412d029c015d0e73f46491ccfd20a28ad1b9b34d0bc2dd87e31d71c76115473c14abd57b086ddca4576c38709b70836a957b5cdcfba59f2c368a6117c0b20507ad27d40ddb919101a7ca08b0b828cd701f245b46e662e0f8d93c57c3afdb4ef415de9e6b589ef403cd9fa6dc0f17c5bb817e7680b1f79f87f6e3efd5105b420154eaffa7ef921921daa39ef32bc97a2c0bd8da3394708e7162921479e4e0009fd634d788ec2b6cce0af3c7b34e80f56d252a76024dbffb75674c2272f44903b341496b882401b51cdc26a94cfd4d0113a5d060714b363dbc1e649305b2e02aa6ba852c1f1a9b21e181c5a576feebd95daf8960e1eeacfaefbdf4387b4f94f697946f00971f2a7d41483fcb1faa8a8a79a6c689a1c2e3c9f7562fb1694000d65bd7a84375232c088efd64fc49a9a86b1567b282429b9ea5d1cf456da774fe0a2e4ece7c8884900ac5464eabd006831c29264bec96a2b0b02453d9111facacc45e0200949898af8ad2851afef817da8336e62bad997869304b421c886cce3c402d87d04f27eb6095bae19a5b0c2d60fbe8a7351a239407fa15f3bc3793f85051af55742f12aee8320816e43fc48abf856f7aeb2208e7b1e55269777428803ba91dc057866642e26b3186e1cec0aa1c7761cd037e8f6096a76f8d4a2014872cf27bc0181009c94fa04d96b3809ed93828f41f5ef68cd73fc648ba18ead5447193b8d04ceaf0f3dbde78c30b4644f9216b8447152e6f96d2f963b6fbfa864209872a6d5d4cfcfe4c5d32417dd1fa2f548ecb67c73f6ba1d891032fc4af499a19592f2a9731f31a86386b35080c9fdbdcbbf34e463e5da679cf5d98db334f19c0135d5638e7fdf3a124a488f5a61e404f37a617c54da05b76276df006e2501d5f0697e2cb96a607551d87a77a9d23dd5196d5a8e4ad4add8a8ccc3552a21bce3268a9008b42e5c5251991d00c6cffbcb5c060c3b0bb15858fe10b346ea7dfafd9b39b4e09467aa7ebb5a2f21043833045f73a8c36e8485de26a522566c6ef2bec1ddc4cccbb5e1189b872031c4d4bedf1590e449a5bb47a47b112efab2d757ed9d80f38e6e7d2a843fdc13c71dc396639eeb8e3465f38a0ff4145c4e57e3a9dfce4accda2ad52615bffd59a5038e7d3532d2cfaddde98232c087ba6e47384ea49fb494093e64a06d3ca22c8c54b9e257376f8b88b7920901575f65f6d734c34d26450625eed5d8813cb078d53faddc99449ca23efdaaad1cda87ad44a5ef62f169b0f4e5b3a70cc63f514c2ec508c0888746e5a751e3234bd26eccd05121211e77fe5a4257d21ead84fc31ad122a8aeea6b8ee4fd11e59675596d6af11c199c8113d271684953c5105266262366bfaa2310a9b6eba2cee3d82707cf7a7d11cf70737f0adb6ec3a8e39d5bec7072e45027c4b50166e04f661b9fbc3e4aa045ac3fa0be7273bcfa9cac4fc7f71f7fb825043952ea5affcf949da66748b09a5c751f47af1079bc921b0c30d82793b61857156eb1b04c221de918bb7d2fba64b014c5cefd451ad797d7c3799f2f27834ccd134e1a984710cd89cd1c744bb3aa800fc92c5745937c7cfc7e9e4901a5b27c7d9066bb7590be84208177720377ea4ce750bea71770dcd8e73effe9e8a6347e4aade202d67dc6ec596d6714e97225eaa551a79ef58c6838c87d185bf4d9a4fdeedddace3bd27313abaa35e89e5e103c78b237b1b7cceb1596cb29d253110f6c58c4272b97cf08a4c9ec7e526d1883841ea0cb03655d91aa14016fde725cae5a6366562c63a8163c5e25bfc2ae9e9c4126b8c0d530545ca5747fad7fb8ab3a6d0", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:40 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000021000)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000200)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000100)='./control\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4) faccessat(r0, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 08:08:40 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x80000001) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)=ANY=[], 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000540)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40000000) fdatasync(r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) syncfs(r3) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={"6d616e676c6500000000000000000000000000000000001600"}, &(0x7f0000000140)=0x54) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TIOCSBRK(r1, 0x5427) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0xfe69) write$P9_RWSTAT(r1, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) write$P9_RRENAMEAT(r1, &(0x7f0000000680)={0x7, 0x4b, 0x1}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_extract_tcp_res(&(0x7f0000000500), 0x51c6, 0x6) 08:08:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="000100000008000066000000c9030000ec000000010000000000000009000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@resgid={'resgid'}}]}) 08:08:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00'}) 08:08:40 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) 08:08:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") open(&(0x7f0000000400)='./bus\x00', 0x200, 0x0) 08:08:40 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lookup_dcookie(0x1, &(0x7f00000001c0)=""/149, 0x95) sync_file_range(r0, 0x80, 0xf8, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) mount$9p_tcp(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@msize={'msize'}}, {@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}]}}) ftruncate(0xffffffffffffffff, 0x7fff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000f28ff8), 0x100000002) tkill(0x0, 0x13) 08:08:40 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) [ 364.626266] IPVS: Creating netns size=2536 id=75 08:08:41 executing program 7: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:41 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lookup_dcookie(0x1, &(0x7f00000001c0)=""/149, 0x95) sync_file_range(r0, 0x80, 0xf8, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) mount$9p_tcp(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@msize={'msize'}}, {@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}]}}) ftruncate(0xffffffffffffffff, 0x7fff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000f28ff8), 0x100000002) tkill(0x0, 0x13) 08:08:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:41 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x4, 0x10000000000002}) 08:08:41 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) 08:08:41 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0), 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xfff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xffffffffffffffff) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000240)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000001c0)={0xff, 0x7, 0x6f, 0x7f, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x6, 0x100000001, 0xfffffffffffff122, 0xd4}) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x1c}) 08:08:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x1ff}, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 365.060334] pktgen: kernel_thread() failed for cpu 0 [ 365.065496] pktgen: Cannot create thread for cpu 0 (-4) [ 365.080667] pktgen: kernel_thread() failed for cpu 1 [ 365.091778] pktgen: Cannot create thread for cpu 1 (-4) [ 365.104190] pktgen: Initialization failed for all threads 08:08:41 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 08:08:41 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x80000001) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)=ANY=[], 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000540)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40000000) fdatasync(r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) syncfs(r3) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={"6d616e676c6500000000000000000000000000000000001600"}, &(0x7f0000000140)=0x54) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TIOCSBRK(r1, 0x5427) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0xfe69) write$P9_RWSTAT(r1, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) write$P9_RRENAMEAT(r1, &(0x7f0000000680)={0x7, 0x4b, 0x1}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_extract_tcp_res(&(0x7f0000000500), 0x51c6, 0x6) 08:08:41 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) 08:08:41 executing program 7: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:41 executing program 2: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:42 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x32fffffe) 08:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="428e797bf6fe6dbc966e4b2203f4aede1db2296372cf15291f62348ad65c44813926c7dc1214f534dd4e0dd82988f60a3575466ef6ad44ae553ca6773ef147bcdd32081d07c6ccc8a0c611f40f5497bae86e7e0d70a42927b22153b7c87e88ff8fa1bff66063854aa877c6b83554ea96672c608116528ddbbc2483837840f0eaf56054f5d7621074d480073c49e270c2bfd31f26a9ba029afb35fe92bc7f609a8255a9830dbc2e076f92379f5fed8d45d475ebf0f581509feb1da5170db57b21cc7cacc739a01dafc897e51632b9be41e2f966b7e34525ea40f58d3b5948ac5c3a42dfadc6eaeea395cc22fb3d834400f37ffa9d4c07390b55c334cd92713402") clock_gettime(0x0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a77"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r6, r5) 08:08:42 executing program 7: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:42 executing program 2: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:42 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lookup_dcookie(0x1, &(0x7f00000001c0)=""/149, 0x95) sync_file_range(r0, 0x80, 0xf8, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) mount$9p_tcp(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@msize={'msize'}}, {@cache_mmap='cache=mmap'}, {@cache_none='cache=none'}]}}) ftruncate(0xffffffffffffffff, 0x7fff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000f28ff8), 0x100000002) tkill(0x0, 0x13) 08:08:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") clock_gettime(0x0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a77"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r6, r5) 08:08:42 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x60000008}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)={0x3ff8, {{0x2, 0x4e22, @local}}, 0x0, 0x5, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x0, @remote}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x0, @dev}}]}, 0x310) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:08:42 executing program 7: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) 08:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") clock_gettime(0x0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a77"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r6, r5) 08:08:42 executing program 2: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) readv(r5, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r5, r4, 0x400000000008, 0x0) tee(r3, r6, 0x9, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000240), 0x0) [ 366.709678] pktgen: kernel_thread() failed for cpu 0 [ 366.717218] pktgen: Cannot create thread for cpu 0 (-4) [ 366.732100] pktgen: kernel_thread() failed for cpu 1 [ 366.737797] pktgen: Cannot create thread for cpu 1 (-4) [ 366.743255] pktgen: Initialization failed for all threads 08:08:43 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x80000001) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)=ANY=[], 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000540)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40000000) fdatasync(r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) syncfs(r3) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={"6d616e676c6500000000000000000000000000000000001600"}, &(0x7f0000000140)=0x54) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TIOCSBRK(r1, 0x5427) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0xfe69) write$P9_RWSTAT(r1, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) write$P9_RRENAMEAT(r1, &(0x7f0000000680)={0x7, 0x4b, 0x1}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_extract_tcp_res(&(0x7f0000000500), 0x51c6, 0x6) 08:08:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") clock_gettime(0x0, &(0x7f0000000140)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x7, 0x25}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r3, &(0x7f00000003c0)='./file0\x00', 0x80, 0x600) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000004c0)={0x80000000}) open$dir(&(0x7f0000001740)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x101000, 0x0) write$tun(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="02040300c1040800000001000000d00000000000025b874847ae0007ffffffff000000000000000379a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b4b5ea7c8e1512fc1fd52f8c30b4df423604f42fb115286bc04c032c623911c56a4756ef517154b87a77"], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff}, 0xfffffffffffffe46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209d"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xffffffffffff0b4b) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000380)='./file0\x00', 0xa3) dup2(r6, r5) 08:08:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) dup(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000680)=""/68, &(0x7f0000000700)=0x44) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000740)={'HL\x00'}, &(0x7f0000000780)=0x1e) 08:08:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0xffffffffffffff39) 08:08:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x80000000, 0x4) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400, 0x184) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) write$9p(r1, &(0x7f0000000340)="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", 0xfe2) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 08:08:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x8}}) [ 366.917142] binder: 26101:26104 got new transaction with bad transaction stack, transaction 97 has target 26101:26104 [ 366.937187] binder: 26101:26104 transaction failed 29201/-71, size 0-0 line 3040 [ 366.953181] binder_alloc: binder_alloc_mmap_handler: 26101 20001000-20004000 already mapped failed -16 08:08:43 executing program 7: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x5c) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 08:08:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x8}}) [ 366.993800] binder: BINDER_SET_CONTEXT_MGR already set [ 366.993810] binder: 26101:26104 ioctl 40046207 0 returned -16 [ 366.993921] IPVS: sh: TCP 127.0.0.1:0 - no destination available [ 367.033630] binder_alloc: 26101: binder_alloc_buf, no vma 08:08:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x8}}) [ 367.053626] binder: 26101:26120 transaction failed 29189/-3, size 0-0 line 3136 [ 367.066274] IPVS: Creating netns size=2536 id=76 [ 367.084661] binder_alloc: 26101: binder_alloc_buf, no vma 08:08:43 executing program 7: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x5c) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 08:08:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0x8}}) [ 367.084684] binder: 26101:26109 transaction failed 29189/-3, size 0-0 line 3136 [ 367.084988] binder: release 26101:26104 transaction 97 in, still active 08:08:43 executing program 7: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x5c) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) [ 367.084996] binder: send failed reply for transaction 97 to 26101:26104 08:08:43 executing program 7: setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}, 0x5c) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 08:08:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) [ 367.085077] binder: undelivered TRANSACTION_COMPLETE [ 367.085084] binder: undelivered TRANSACTION_ERROR: 29201 [ 367.085088] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.272145] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.279828] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.377935] attempt to access beyond end of device [ 367.384481] loop0: rw=0, want=11307866476490730, limit=264192 [ 367.393733] attempt to access beyond end of device [ 367.399339] loop0: rw=0, want=11307866476490724, limit=264192 [ 367.408035] buffer_io_error: 5 callbacks suppressed [ 367.408043] Buffer I/O error on dev loop0p105, logical block 7533491034799680, async page read [ 367.423704] attempt to access beyond end of device [ 367.432672] loop0: rw=0, want=11307866476490726, limit=264192 [ 367.441285] Buffer I/O error on dev loop0p105, logical block 7533491034799681, async page read [ 367.450476] attempt to access beyond end of device [ 367.456095] loop0: rw=0, want=11307866476490728, limit=264192 [ 367.462247] Buffer I/O error on dev loop0p105, logical block 7533491034799682, async page read [ 367.471747] attempt to access beyond end of device [ 367.478151] loop0: rw=0, want=11307866476490730, limit=264192 [ 367.484298] Buffer I/O error on dev loop0p105, logical block 7533491034799683, async page read [ 367.493713] attempt to access beyond end of device [ 367.499099] loop0: rw=0, want=11307866476490938, limit=264192 [ 367.505226] attempt to access beyond end of device [ 367.510673] loop0: rw=0, want=11307866476490932, limit=264192 [ 367.517116] Buffer I/O error on dev loop0p105, logical block 7533491034799784, async page read 08:08:44 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @loopback}, &(0x7f0000000640)=0x10, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) fallocate(r1, 0x1, 0x0, 0x80000001) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000540)=ANY=[], 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) getsockname$inet(r1, &(0x7f0000000540)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40000000) fdatasync(r2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) syncfs(r3) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={"6d616e676c6500000000000000000000000000000000001600"}, &(0x7f0000000140)=0x54) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TIOCSBRK(r1, 0x5427) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0xfe69) write$P9_RWSTAT(r1, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) write$P9_RRENAMEAT(r1, &(0x7f0000000680)={0x7, 0x4b, 0x1}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_extract_tcp_res(&(0x7f0000000500), 0x51c6, 0x6) 08:08:44 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:44 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000010c0)={0x77359400}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440), 0x0, &(0x7f0000002480)=""/112, 0x70}}], 0x1, 0x0, &(0x7f0000002a80)={0x0, 0x989680}) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/14, 0xe}], 0x1, &(0x7f0000000600)=""/221, 0xdd}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x16) 08:08:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) [ 367.526478] attempt to access beyond end of device [ 367.531614] loop0: rw=0, want=11307866476490934, limit=264192 [ 367.556361] Buffer I/O error on dev loop0p105, logical block 7533491034799785, async page read [ 367.577098] binder: 26152:26157 got new transaction with bad transaction stack, transaction 102 has target 26152:26157 [ 367.577110] binder: 26152:26157 transaction failed 29201/-71, size 0-0 line 3040 [ 367.577448] binder: release 26152:26157 transaction 102 out, still active [ 367.577451] binder: undelivered TRANSACTION_COMPLETE [ 367.577458] binder: undelivered TRANSACTION_ERROR: 29201 [ 367.609896] binder: release 26152:26157 transaction 102 in, still active [ 367.609902] binder: send failed reply for transaction 102, target dead [ 367.665105] attempt to access beyond end of device [ 367.670651] loop0: rw=0, want=11307866476490936, limit=264192 [ 367.686831] Buffer I/O error on dev loop0p105, logical block 7533491034799786, async page read [ 367.696061] attempt to access beyond end of device [ 367.720424] loop0: rw=0, want=11307866476490938, limit=264192 [ 367.743767] Buffer I/O error on dev loop0p105, logical block 7533491034799787, async page read [ 367.753587] attempt to access beyond end of device [ 367.761454] loop0: rw=0, want=18442984958116442986, limit=264192 [ 367.779423] attempt to access beyond end of device [ 367.784411] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) [ 367.795174] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 367.803365] attempt to access beyond end of device [ 367.810143] loop0: rw=0, want=18442984958116442982, limit=264192 [ 367.818814] binder: 26167:26168 got new transaction with bad transaction stack, transaction 105 has target 26167:26168 [ 367.818826] binder: 26167:26168 transaction failed 29201/-71, size 0-0 line 3040 08:08:44 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:44 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:44 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) [ 367.819094] binder: release 26167:26168 transaction 105 out, still active [ 367.819097] binder: undelivered TRANSACTION_COMPLETE [ 367.819105] binder: undelivered TRANSACTION_ERROR: 29201 [ 367.836097] binder: release 26167:26168 transaction 105 in, still active [ 367.836102] binder: send failed reply for transaction 105, target dead [ 367.900609] binder: 26172:26177 got new transaction with bad transaction stack, transaction 108 has target 26172:26177 [ 367.900622] binder: 26172:26177 transaction failed 29201/-71, size 0-0 line 3040 08:08:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) [ 367.900883] binder: release 26172:26177 transaction 108 out, still active [ 367.900886] binder: undelivered TRANSACTION_COMPLETE [ 367.900894] binder: undelivered TRANSACTION_ERROR: 29201 [ 367.937722] binder: release 26172:26177 transaction 108 in, still active 08:08:44 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) [ 367.937728] binder: send failed reply for transaction 108, target dead [ 368.039656] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 368.072139] binder: 26192:26196 got new transaction with bad transaction stack, transaction 111 has target 26192:26196 [ 368.072151] binder: 26192:26196 transaction failed 29201/-71, size 0-0 line 3040 [ 368.073358] binder: release 26192:26196 transaction 111 out, still active [ 368.073362] binder: undelivered TRANSACTION_COMPLETE [ 368.073369] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.100034] binder: release 26192:26196 transaction 111 in, still active [ 368.100040] binder: send failed reply for transaction 111, target dead [ 368.172206] attempt to access beyond end of device [ 368.177177] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.183316] attempt to access beyond end of device [ 368.188381] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.194564] attempt to access beyond end of device [ 368.199506] loop0: rw=0, want=18442984958116442988, limit=264192 [ 368.205647] attempt to access beyond end of device [ 368.210597] loop0: rw=0, want=18442984958116442990, limit=264192 [ 368.216768] attempt to access beyond end of device [ 368.221686] loop0: rw=0, want=18442984958116442992, limit=264192 [ 368.228083] attempt to access beyond end of device [ 368.233022] loop0: rw=0, want=18442984958116442994, limit=264192 [ 368.239233] attempt to access beyond end of device [ 368.244150] loop0: rw=0, want=11307866476490948, limit=264192 [ 368.250087] attempt to access beyond end of device [ 368.255013] loop0: rw=0, want=11307866476490950, limit=264192 [ 368.260962] attempt to access beyond end of device [ 368.265917] loop0: rw=0, want=11307866476490952, limit=264192 [ 368.272447] attempt to access beyond end of device [ 368.277403] loop0: rw=0, want=18442984958116442988, limit=264192 [ 368.283542] attempt to access beyond end of device [ 368.288479] loop0: rw=0, want=18442984958116442990, limit=264192 [ 368.294615] attempt to access beyond end of device [ 368.299554] loop0: rw=0, want=18442984958116442992, limit=264192 [ 368.305738] attempt to access beyond end of device [ 368.310655] loop0: rw=0, want=18442984958116442994, limit=264192 [ 368.316826] attempt to access beyond end of device [ 368.321745] loop0: rw=0, want=18442984958116442988, limit=264192 [ 368.327908] attempt to access beyond end of device [ 368.332841] loop0: rw=0, want=18442984958116442990, limit=264192 [ 368.339224] attempt to access beyond end of device [ 368.344148] loop0: rw=0, want=18442984958116442992, limit=264192 [ 368.350308] attempt to access beyond end of device [ 368.355226] loop0: rw=0, want=18442984958116442994, limit=264192 [ 368.361558] attempt to access beyond end of device [ 368.366518] loop0: rw=0, want=11307866476490940, limit=264192 [ 368.372401] attempt to access beyond end of device [ 368.377348] loop0: rw=0, want=11307866476490942, limit=264192 [ 368.383239] attempt to access beyond end of device [ 368.388170] loop0: rw=0, want=11307866476490944, limit=264192 [ 368.394054] attempt to access beyond end of device [ 368.399005] loop0: rw=0, want=11307866476490946, limit=264192 [ 368.404901] attempt to access beyond end of device [ 368.409867] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.416040] attempt to access beyond end of device [ 368.420967] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.427119] attempt to access beyond end of device [ 368.432124] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.438276] attempt to access beyond end of device [ 368.443195] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.449613] attempt to access beyond end of device [ 368.454542] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.460699] attempt to access beyond end of device [ 368.465617] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.471768] attempt to access beyond end of device [ 368.476833] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.482969] attempt to access beyond end of device [ 368.487927] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.494082] attempt to access beyond end of device [ 368.499020] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.505159] attempt to access beyond end of device [ 368.510093] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.516263] attempt to access beyond end of device [ 368.521180] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.527352] attempt to access beyond end of device [ 368.532280] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.538465] attempt to access beyond end of device [ 368.543397] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.549564] attempt to access beyond end of device [ 368.554490] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.560882] attempt to access beyond end of device [ 368.565852] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.571999] attempt to access beyond end of device [ 368.576952] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.583122] attempt to access beyond end of device [ 368.588068] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.594225] attempt to access beyond end of device [ 368.599184] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.605341] attempt to access beyond end of device [ 368.610288] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.616466] attempt to access beyond end of device [ 368.621410] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.627596] attempt to access beyond end of device [ 368.632529] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.638703] attempt to access beyond end of device [ 368.643636] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.649815] attempt to access beyond end of device [ 368.654751] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.660925] attempt to access beyond end of device [ 368.666105] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.672292] attempt to access beyond end of device [ 368.677245] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.683411] attempt to access beyond end of device [ 368.688356] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.694517] attempt to access beyond end of device [ 368.699464] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.705618] attempt to access beyond end of device [ 368.710573] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.716782] attempt to access beyond end of device [ 368.721723] loop0: rw=0, want=18442984958116445028, limit=264192 [ 368.727908] attempt to access beyond end of device [ 368.732842] loop0: rw=0, want=18442984958116445030, limit=264192 [ 368.739014] attempt to access beyond end of device [ 368.743946] loop0: rw=0, want=18442984958116445032, limit=264192 [ 368.750117] attempt to access beyond end of device [ 368.755046] loop0: rw=0, want=18442984958116445034, limit=264192 [ 368.761229] attempt to access beyond end of device [ 368.766179] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.772337] attempt to access beyond end of device [ 368.777540] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.783699] attempt to access beyond end of device [ 368.788653] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.794805] attempt to access beyond end of device [ 368.799754] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.806015] attempt to access beyond end of device [ 368.810953] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.817119] attempt to access beyond end of device [ 368.822052] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.828218] attempt to access beyond end of device [ 368.833152] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.839318] attempt to access beyond end of device [ 368.844255] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.850442] attempt to access beyond end of device [ 368.855375] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.861559] attempt to access beyond end of device [ 368.866511] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.872663] attempt to access beyond end of device [ 368.877637] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.879952] pktgen: kernel_thread() failed for cpu 0 [ 368.879960] pktgen: Cannot create thread for cpu 0 (-4) [ 368.879974] pktgen: kernel_thread() failed for cpu 1 [ 368.879979] pktgen: Cannot create thread for cpu 1 (-4) [ 368.879983] pktgen: Initialization failed for all threads [ 368.910363] attempt to access beyond end of device [ 368.915301] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.921487] attempt to access beyond end of device [ 368.926433] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.932573] attempt to access beyond end of device [ 368.937528] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.943683] attempt to access beyond end of device [ 368.948633] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.954784] attempt to access beyond end of device [ 368.959739] loop0: rw=0, want=18442984958116442986, limit=264192 [ 368.966002] attempt to access beyond end of device [ 368.970942] loop0: rw=0, want=18442984958116442980, limit=264192 [ 368.977124] attempt to access beyond end of device [ 368.982059] loop0: rw=0, want=18442984958116442982, limit=264192 [ 368.988467] attempt to access beyond end of device [ 368.993412] loop0: rw=0, want=18442984958116442984, limit=264192 [ 368.999829] attempt to access beyond end of device [ 369.004768] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.010964] attempt to access beyond end of device [ 369.015943] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.022097] attempt to access beyond end of device [ 369.027047] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.033203] attempt to access beyond end of device 08:08:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:45 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) [ 369.038154] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.044320] attempt to access beyond end of device [ 369.055721] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.061894] attempt to access beyond end of device [ 369.066869] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.073029] attempt to access beyond end of device [ 369.077985] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.084151] attempt to access beyond end of device 08:08:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:45 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:45 executing program 0: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000080)='/\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000200)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000680), 0x83fe, &(0x7f0000000480)={[{@journal_ioprio={'journal_ioprio'}}]}) [ 369.089972] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.106989] binder: 26214:26216 got new transaction with bad transaction stack, transaction 114 has target 26214:26216 [ 369.107002] binder: 26214:26216 transaction failed 29201/-71, size 0-0 line 3040 [ 369.108230] binder: release 26214:26216 transaction 114 out, still active [ 369.108234] binder: undelivered TRANSACTION_COMPLETE [ 369.108242] binder: undelivered TRANSACTION_ERROR: 29201 [ 369.139527] binder: release 26214:26216 transaction 114 in, still active [ 369.139532] binder: send failed reply for transaction 114, target dead [ 369.244551] attempt to access beyond end of device [ 369.249555] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.260692] attempt to access beyond end of device [ 369.266049] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.276795] attempt to access beyond end of device [ 369.284710] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.290988] attempt to access beyond end of device [ 369.296036] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.302249] attempt to access beyond end of device [ 369.307261] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.313528] attempt to access beyond end of device 08:08:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x501080, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x80, [{{0xa6, 0x3, 0x5}, 0x2, 0x8, 0x7, './file0'}]}}, 0x2a) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) accept4$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c, 0x80800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x8, 0x0, 0x0, 0x4}, &(0x7f0000000540)=0x20) fcntl$notify(r1, 0x402, 0x0) socketpair(0x8, 0x6, 0x8, &(0x7f00000007c0)) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e70b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353"], 0x1) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)=""/82) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) getsockname$inet(r2, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f0000000780)=0x10) 08:08:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:45 executing program 2: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8da1fcc6aabfb6f858e89070f966ea60a292a6a0c5e8000cea23baaeb2875a386d7b0e8210eca"}, 0xd8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 08:08:45 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f0000000500)}) 08:08:45 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf}, @IFA_LOCAL={0x14}]}, 0x40}}, 0x0) 08:08:45 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000480)) [ 369.318766] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.324990] attempt to access beyond end of device [ 369.330223] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.336671] attempt to access beyond end of device [ 369.341674] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.347922] attempt to access beyond end of device [ 369.354597] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.368563] attempt to access beyond end of device [ 369.384336] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.396201] binder: 26235:26239 got new transaction with bad transaction stack, transaction 117 has target 26235:26239 08:08:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") setsockopt(r0, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0) 08:08:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0x0, 0x7}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="390000001300090417feb1ae7aa77cf40000ff3f01000000000000000000001419000400430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x0) 08:08:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000480)) [ 369.396215] binder: 26235:26239 transaction failed 29201/-71, size 0-0 line 3040 [ 369.396628] binder: release 26235:26239 transaction 117 out, still active [ 369.396632] binder: undelivered TRANSACTION_COMPLETE 08:08:46 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000540)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)="05e916da644d44ca1833e70cee1abd3864f1", 0x12) getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{}, 0x4000}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000280)={0x4, 0xd066}) 08:08:46 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local}, 0xc) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 369.396640] binder: undelivered TRANSACTION_ERROR: 29201 08:08:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000480)) [ 369.423940] binder: release 26235:26239 transaction 117 in, still active [ 369.423945] binder: send failed reply for transaction 117, target dead [ 369.516614] attempt to access beyond end of device [ 369.521844] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.528440] attempt to access beyond end of device [ 369.533658] loop0: rw=0, want=18442984958116442984, limit=264192 08:08:46 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000600)=""/207, 0xcf) 08:08:46 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000480)) [ 369.563347] attempt to access beyond end of device [ 369.582610] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.600122] attempt to access beyond end of device [ 369.605248] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:46 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) write$P9_RLCREATE(r1, &(0x7f0000000000)={0x18}, 0x18) fdatasync(r1) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 369.611580] attempt to access beyond end of device [ 369.616838] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.623513] attempt to access beyond end of device [ 369.650707] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.660036] attempt to access beyond end of device [ 369.665116] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.671810] attempt to access beyond end of device [ 369.677197] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.684939] attempt to access beyond end of device [ 369.704177] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.712609] attempt to access beyond end of device [ 369.732492] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.739060] attempt to access beyond end of device [ 369.744123] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.751676] attempt to access beyond end of device 08:08:46 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0x42d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}]}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) 08:08:46 executing program 0: ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) 08:08:46 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) getdents64(r0, &(0x7f0000000100)=""/70, 0x46) [ 369.761368] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.768396] attempt to access beyond end of device [ 369.773495] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.781082] attempt to access beyond end of device [ 369.788143] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.801553] attempt to access beyond end of device [ 369.803538] IPVS: stopping master sync thread 22875 ... [ 369.829362] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.838134] attempt to access beyond end of device [ 369.843184] loop0: rw=0, want=18442984958116442980, limit=264192 [ 369.852696] attempt to access beyond end of device [ 369.858018] loop0: rw=0, want=18442984958116442982, limit=264192 [ 369.864928] attempt to access beyond end of device [ 369.870273] loop0: rw=0, want=18442984958116442984, limit=264192 [ 369.877100] attempt to access beyond end of device [ 369.882127] loop0: rw=0, want=18442984958116442986, limit=264192 [ 369.889583] attempt to access beyond end of device [ 369.900540] loop0: rw=0, want=18442984958116442988, limit=264192 [ 369.914684] attempt to access beyond end of device [ 369.925185] loop0: rw=0, want=18442984958116442990, limit=264192 [ 369.938159] attempt to access beyond end of device [ 369.949909] loop0: rw=0, want=18442984958116442992, limit=264192 [ 369.962926] attempt to access beyond end of device 08:08:46 executing program 2: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8da1fcc6aabfb6f858e89070f966ea60a292a6a0c5e8000cea23baaeb2875a386d7b0e8210eca"}, 0xd8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 369.970232] loop0: rw=0, want=18442984958116442994, limit=264192 [ 369.976822] attempt to access beyond end of device [ 369.982885] loop0: rw=0, want=18442984958116442988, limit=264192 [ 369.989770] attempt to access beyond end of device [ 369.995213] loop0: rw=0, want=18442984958116442990, limit=264192 [ 370.005643] attempt to access beyond end of device [ 370.011190] loop0: rw=0, want=18442984958116442992, limit=264192 [ 370.020476] attempt to access beyond end of device 08:08:46 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r1) 08:08:46 executing program 1: mkdir(&(0x7f0000001a80)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="6c6f67696e756964001e86e8fb9db98dbc6fe7c7bb400000000000000014f039779e63070000007d9c6e9a4ea9dc63ee60631e26ad229364ce9c9c17c68031095099dafd2039486e7ed9530db5a30baa78eb1b6f1955ae5261704326821beb321e951b") ftruncate(r1, 0x100000000) [ 370.029581] loop0: rw=0, want=18442984958116442994, limit=264192 [ 370.055822] attempt to access beyond end of device [ 370.076603] loop0: rw=0, want=18442984958116442988, limit=264192 [ 370.093163] attempt to access beyond end of device [ 370.111181] loop0: rw=0, want=18442984958116442990, limit=264192 08:08:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 370.129809] attempt to access beyond end of device [ 370.150466] loop0: rw=0, want=18442984958116442992, limit=264192 [ 370.164715] attempt to access beyond end of device [ 370.170127] loop0: rw=0, want=18442984958116442994, limit=264192 [ 370.179700] attempt to access beyond end of device [ 370.184789] loop0: rw=0, want=18442984958116442988, limit=264192 [ 370.191448] attempt to access beyond end of device [ 370.196740] loop0: rw=0, want=18442984958116442990, limit=264192 [ 370.203050] attempt to access beyond end of device [ 370.208967] loop0: rw=0, want=18442984958116442992, limit=264192 [ 370.220479] attempt to access beyond end of device [ 370.231894] loop0: rw=0, want=18442984958116442994, limit=264192 [ 370.238595] attempt to access beyond end of device [ 370.243774] loop0: rw=0, want=18442984958116443004, limit=264192 [ 370.250523] attempt to access beyond end of device [ 370.255661] loop0: rw=0, want=18442984958116443006, limit=264192 [ 370.262318] attempt to access beyond end of device [ 370.267744] loop0: rw=0, want=18442984958116443008, limit=264192 [ 370.274340] attempt to access beyond end of device [ 370.279782] loop0: rw=0, want=18442984958116443010, limit=264192 [ 370.286477] attempt to access beyond end of device [ 370.291639] loop0: rw=0, want=18442984958116443004, limit=264192 [ 370.298326] attempt to access beyond end of device [ 370.303489] loop0: rw=0, want=18442984958116443006, limit=264192 [ 370.310195] attempt to access beyond end of device [ 370.315376] loop0: rw=0, want=18442984958116443008, limit=264192 [ 370.322308] attempt to access beyond end of device [ 370.327705] loop0: rw=0, want=18442984958116443010, limit=264192 [ 370.334117] attempt to access beyond end of device [ 370.339585] loop0: rw=0, want=18442984958116443004, limit=264192 [ 370.346215] attempt to access beyond end of device [ 370.351366] loop0: rw=0, want=18442984958116443006, limit=264192 [ 370.358078] attempt to access beyond end of device [ 370.363238] loop0: rw=0, want=18442984958116443008, limit=264192 [ 370.369963] attempt to access beyond end of device [ 370.375122] loop0: rw=0, want=18442984958116443010, limit=264192 [ 370.381935] attempt to access beyond end of device [ 370.387313] loop0: rw=0, want=18442984958116443004, limit=264192 [ 370.393697] attempt to access beyond end of device [ 370.399156] loop0: rw=0, want=18442984958116443006, limit=264192 [ 370.405550] attempt to access beyond end of device [ 370.411010] loop0: rw=0, want=18442984958116443008, limit=264192 [ 370.417735] attempt to access beyond end of device [ 370.422884] loop0: rw=0, want=18442984958116443010, limit=264192 [ 370.435939] attempt to access beyond end of device [ 370.447657] loop0: rw=0, want=18442984958116443036, limit=264192 [ 370.462871] attempt to access beyond end of device [ 370.470281] loop0: rw=0, want=18442984958116443038, limit=264192 [ 370.476575] attempt to access beyond end of device [ 370.481552] loop0: rw=0, want=18442984958116443040, limit=264192 [ 370.488366] attempt to access beyond end of device [ 370.493465] loop0: rw=0, want=18442984958116443042, limit=264192 [ 370.500134] attempt to access beyond end of device [ 370.505100] loop0: rw=0, want=18442984958116443036, limit=264192 [ 370.516489] attempt to access beyond end of device [ 370.524272] loop0: rw=0, want=18442984958116443038, limit=264192 [ 370.530528] attempt to access beyond end of device [ 370.535488] loop0: rw=0, want=18442984958116443040, limit=264192 [ 370.543134] attempt to access beyond end of device [ 370.548365] loop0: rw=0, want=18442984958116443042, limit=264192 [ 370.554600] attempt to access beyond end of device [ 370.559657] loop0: rw=0, want=18442984958116443036, limit=264192 [ 370.565898] attempt to access beyond end of device [ 370.570863] loop0: rw=0, want=18442984958116443038, limit=264192 [ 370.577200] attempt to access beyond end of device [ 370.582168] loop0: rw=0, want=18442984958116443040, limit=264192 [ 370.588372] attempt to access beyond end of device [ 370.593347] loop0: rw=0, want=18442984958116443042, limit=264192 [ 370.599605] attempt to access beyond end of device [ 370.604571] loop0: rw=0, want=18442984958116443036, limit=264192 [ 370.610797] attempt to access beyond end of device [ 370.616449] loop0: rw=0, want=18442984958116443038, limit=264192 [ 370.622650] attempt to access beyond end of device [ 370.627641] loop0: rw=0, want=18442984958116443040, limit=264192 [ 370.633838] attempt to access beyond end of device [ 370.638850] loop0: rw=0, want=18442984958116443042, limit=264192 [ 370.645092] attempt to access beyond end of device [ 370.650076] loop0: rw=0, want=18442984958116443100, limit=264192 [ 370.656599] attempt to access beyond end of device [ 370.661593] loop0: rw=0, want=18442984958116443102, limit=264192 [ 370.667795] attempt to access beyond end of device [ 370.672767] loop0: rw=0, want=18442984958116443104, limit=264192 [ 370.678997] attempt to access beyond end of device [ 370.683963] loop0: rw=0, want=18442984958116443106, limit=264192 [ 370.690182] attempt to access beyond end of device [ 370.695147] loop0: rw=0, want=18442984958116443100, limit=264192 [ 370.701374] attempt to access beyond end of device [ 370.706371] loop0: rw=0, want=18442984958116443102, limit=264192 [ 370.712575] attempt to access beyond end of device [ 370.717571] loop0: rw=0, want=18442984958116443104, limit=264192 [ 370.723753] attempt to access beyond end of device [ 370.728791] loop0: rw=0, want=18442984958116443106, limit=264192 [ 370.734991] attempt to access beyond end of device [ 370.739978] loop0: rw=0, want=18442984958116443100, limit=264192 [ 370.746835] attempt to access beyond end of device [ 370.751802] loop0: rw=0, want=18442984958116443102, limit=264192 [ 370.757997] attempt to access beyond end of device [ 370.762973] loop0: rw=0, want=18442984958116443104, limit=264192 [ 370.769435] attempt to access beyond end of device [ 370.774415] loop0: rw=0, want=18442984958116443106, limit=264192 [ 370.780632] attempt to access beyond end of device [ 370.785596] loop0: rw=0, want=18442984958116443100, limit=264192 [ 370.791870] attempt to access beyond end of device [ 370.796873] loop0: rw=0, want=18442984958116443102, limit=264192 [ 370.803056] attempt to access beyond end of device [ 370.808029] loop0: rw=0, want=18442984958116443104, limit=264192 [ 370.814244] attempt to access beyond end of device [ 370.819223] loop0: rw=0, want=18442984958116443106, limit=264192 [ 370.825442] attempt to access beyond end of device [ 370.830436] loop0: rw=0, want=18442984958116442980, limit=264192 [ 370.836636] attempt to access beyond end of device [ 370.841726] loop0: rw=0, want=18442984958116442982, limit=264192 [ 370.848010] attempt to access beyond end of device [ 370.852959] loop0: rw=0, want=18442984958116442984, limit=264192 [ 370.859198] attempt to access beyond end of device [ 370.864219] loop0: rw=0, want=18442984958116442986, limit=264192 [ 370.870444] attempt to access beyond end of device [ 370.875369] loop0: rw=0, want=18442984958116442980, limit=264192 [ 370.882450] attempt to access beyond end of device [ 370.887459] loop0: rw=0, want=18442984958116442982, limit=264192 [ 370.893604] attempt to access beyond end of device [ 370.898610] loop0: rw=0, want=18442984958116442984, limit=264192 [ 370.904759] attempt to access beyond end of device [ 370.909696] loop0: rw=0, want=18442984958116442986, limit=264192 [ 370.915878] attempt to access beyond end of device [ 370.920800] loop0: rw=0, want=18442984958116442988, limit=264192 [ 370.926961] attempt to access beyond end of device [ 370.931884] loop0: rw=0, want=18442984958116442990, limit=264192 [ 370.938054] attempt to access beyond end of device [ 370.942979] loop0: rw=0, want=18442984958116442992, limit=264192 [ 370.949165] attempt to access beyond end of device [ 370.954091] loop0: rw=0, want=18442984958116442994, limit=264192 [ 370.960285] attempt to access beyond end of device [ 370.965224] loop0: rw=0, want=18442984958116442988, limit=264192 [ 370.973780] attempt to access beyond end of device [ 370.978765] loop0: rw=0, want=18442984958116442990, limit=264192 [ 370.985021] attempt to access beyond end of device [ 370.990693] loop0: rw=0, want=18442984958116442992, limit=264192 [ 370.996878] attempt to access beyond end of device [ 371.001805] loop0: rw=0, want=18442984958116442994, limit=264192 [ 371.008623] attempt to access beyond end of device [ 371.013550] loop0: rw=0, want=18442984958116443004, limit=264192 [ 371.019722] attempt to access beyond end of device [ 371.024646] loop0: rw=0, want=18442984958116443006, limit=264192 [ 371.030848] attempt to access beyond end of device [ 371.035813] loop0: rw=0, want=18442984958116443008, limit=264192 [ 371.041995] attempt to access beyond end of device [ 371.046987] loop0: rw=0, want=18442984958116443010, limit=264192 [ 371.053151] attempt to access beyond end of device [ 371.058110] loop0: rw=0, want=18442984958116443004, limit=264192 [ 371.064253] attempt to access beyond end of device [ 371.069198] loop0: rw=0, want=18442984958116443006, limit=264192 [ 371.075344] attempt to access beyond end of device [ 371.080301] loop0: rw=0, want=18442984958116443008, limit=264192 [ 371.086469] attempt to access beyond end of device [ 371.091416] loop0: rw=0, want=18442984958116443010, limit=264192 [ 371.097838] attempt to access beyond end of device 08:08:47 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setpriority(0x2, 0x0, 0x0) 08:08:47 executing program 2: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8da1fcc6aabfb6f858e89070f966ea60a292a6a0c5e8000cea23baaeb2875a386d7b0e8210eca"}, 0xd8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 08:08:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 08:08:47 executing program 4: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:47 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r1) 08:08:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 08:08:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 371.107514] loop0: rw=0, want=18442984958116443036, limit=264192 [ 371.113673] attempt to access beyond end of device [ 371.121462] loop0: rw=0, want=18442984958116443038, limit=264192 [ 371.151931] attempt to access beyond end of device 08:08:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 08:08:47 executing program 7: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=""/40, &(0x7f00000000c0)=0xffffffffffffffe3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000580)=""/218, 0xda) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x4000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000340)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000700)=""/226) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 371.184924] loop0: rw=0, want=18442984958116443040, limit=264192 [ 371.224133] attempt to access beyond end of device 08:08:47 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r1) 08:08:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 08:08:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 371.256590] loop0: rw=0, want=18442984958116443042, limit=264192 [ 371.291833] attempt to access beyond end of device 08:08:47 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 371.323962] loop0: rw=0, want=18442984958116443036, limit=264192 [ 371.363000] attempt to access beyond end of device 08:08:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x4170000}, 0x349, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffff0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 08:08:47 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f00007a9000)=""/1, 0x2034afa5}], 0x1, 0x0) close(r1) 08:08:48 executing program 7: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="fadcaee310e7eaeb341a4d782d194c26dec455b90ae37757c72e9ea16c02e590435b312361e726051945eefe8cfe5aa37cfe94d0c8587278329a8176fb4aff024226e1222ef57afb568e36623929c198a722987b3d9359b773047e2f0dbea43338c5930ab6cae5f9889a85890b199f8c966f2ac8bbefc84fe6f0f9c5b111d59f05e72397d7575b9f11a0a5cc74a814498017fe4ef1e9a9d16b78c7b682cbcb6ec77985c4f2c82924a9f62030cc584088018b25c9e4f939a3dda39d26fdafa79759e0c619a88471f7e4fcd630f11b4ca2bcb025850f74771e5ebc524f45ae90f4d5fcd9da7bb588699c47a1c4580b694cdda7958ee13f61a2f8d8b8a02c032b34") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=""/40, &(0x7f00000000c0)=0xffffffffffffffe3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000580)=""/218, 0xda) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x4000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000340)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000700)=""/226) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 371.409902] loop0: rw=0, want=18442984958116443038, limit=264192 [ 371.436702] attempt to access beyond end of device [ 371.465030] loop0: rw=0, want=18442984958116443040, limit=264192 [ 371.504110] attempt to access beyond end of device [ 371.529879] loop0: rw=0, want=18442984958116443042, limit=264192 [ 371.569546] attempt to access beyond end of device [ 371.582005] loop0: rw=0, want=18442984958116443100, limit=264192 [ 371.601649] attempt to access beyond end of device [ 371.628957] loop0: rw=0, want=18442984958116443102, limit=264192 [ 371.651892] attempt to access beyond end of device [ 371.673704] loop0: rw=0, want=18442984958116443104, limit=264192 [ 371.702221] attempt to access beyond end of device [ 371.720989] loop0: rw=0, want=18442984958116443106, limit=264192 [ 371.741768] attempt to access beyond end of device [ 371.761823] loop0: rw=0, want=18442984958116443100, limit=264192 [ 371.777730] attempt to access beyond end of device [ 371.789635] loop0: rw=0, want=18442984958116443102, limit=264192 [ 371.805410] attempt to access beyond end of device [ 371.818330] loop0: rw=0, want=18442984958116443104, limit=264192 [ 371.831360] attempt to access beyond end of device [ 371.843233] loop0: rw=0, want=18442984958116443106, limit=264192 [ 371.860081] attempt to access beyond end of device [ 371.877528] loop0: rw=0, want=18442984958116442980, limit=264192 [ 371.900033] attempt to access beyond end of device [ 371.920484] loop0: rw=0, want=18442984958116442982, limit=264192 08:08:48 executing program 2: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8da1fcc6aabfb6f858e89070f966ea60a292a6a0c5e8000cea23baaeb2875a386d7b0e8210eca"}, 0xd8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 371.972132] attempt to access beyond end of device 08:08:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) [ 371.998959] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.030291] attempt to access beyond end of device [ 372.046657] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.069554] attempt to access beyond end of device [ 372.085873] loop0: rw=0, want=18442984958116442980, limit=264192 [ 372.100248] attempt to access beyond end of device [ 372.119842] loop0: rw=0, want=18442984958116442982, limit=264192 [ 372.126348] attempt to access beyond end of device [ 372.133689] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.148618] attempt to access beyond end of device [ 372.159582] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.196814] attempt to access beyond end of device [ 372.205173] loop0: rw=0, want=18442984958116442980, limit=264192 [ 372.228274] attempt to access beyond end of device [ 372.239977] loop0: rw=0, want=18442984958116442982, limit=264192 [ 372.271498] attempt to access beyond end of device [ 372.282161] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.305755] attempt to access beyond end of device [ 372.322203] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.343411] attempt to access beyond end of device [ 372.364607] loop0: rw=0, want=18442984958116442980, limit=264192 [ 372.389336] attempt to access beyond end of device [ 372.416098] loop0: rw=0, want=18442984958116442982, limit=264192 [ 372.422332] buffer_io_error: 226 callbacks suppressed [ 372.422339] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 372.460592] attempt to access beyond end of device [ 372.472308] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.501561] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 372.517974] attempt to access beyond end of device [ 372.551296] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.564224] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 372.602096] attempt to access beyond end of device [ 372.617112] loop0: rw=0, want=18442984958116442980, limit=264192 [ 372.636740] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 372.656008] attempt to access beyond end of device [ 372.661012] loop0: rw=0, want=18442984958116442982, limit=264192 [ 372.675073] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 372.691741] attempt to access beyond end of device [ 372.700710] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.707126] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 372.714663] attempt to access beyond end of device [ 372.720569] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.753653] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 372.761448] attempt to access beyond end of device [ 372.766629] loop0: rw=0, want=18442984958116442980, limit=264192 [ 372.772782] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 372.785820] attempt to access beyond end of device [ 372.790829] loop0: rw=0, want=18442984958116442982, limit=264192 [ 372.797335] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 372.804862] attempt to access beyond end of device [ 372.810519] loop0: rw=0, want=18442984958116442984, limit=264192 [ 372.817048] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 372.824546] attempt to access beyond end of device [ 372.829820] loop0: rw=0, want=18442984958116442986, limit=264192 [ 372.836297] attempt to access beyond end of device [ 372.841278] loop0: rw=0, want=18442984958116442996, limit=264192 [ 372.847975] attempt to access beyond end of device [ 372.852958] loop0: rw=0, want=18442984958116442998, limit=264192 [ 372.859452] attempt to access beyond end of device [ 372.864439] loop0: rw=0, want=18442984958116443000, limit=264192 [ 372.870975] attempt to access beyond end of device [ 372.876222] loop0: rw=0, want=18442984958116443002, limit=264192 [ 372.882466] attempt to access beyond end of device [ 372.889125] loop0: rw=0, want=18442984958116443108, limit=264192 [ 372.895322] attempt to access beyond end of device [ 372.900563] loop0: rw=0, want=18442984958116443110, limit=264192 [ 372.907034] attempt to access beyond end of device [ 372.912009] loop0: rw=0, want=18442984958116443112, limit=264192 [ 372.918499] attempt to access beyond end of device [ 372.923478] loop0: rw=0, want=18442984958116443114, limit=264192 [ 372.930161] attempt to access beyond end of device [ 372.935148] loop0: rw=0, want=18442984958116443108, limit=264192 [ 372.941691] attempt to access beyond end of device [ 372.946891] loop0: rw=0, want=18442984958116443110, limit=264192 [ 372.953094] attempt to access beyond end of device [ 372.958548] loop0: rw=0, want=18442984958116443112, limit=264192 [ 372.964745] attempt to access beyond end of device [ 372.970061] loop0: rw=0, want=18442984958116443114, limit=264192 [ 372.976555] attempt to access beyond end of device [ 372.981536] loop0: rw=0, want=18442984958116443108, limit=264192 [ 372.988305] attempt to access beyond end of device [ 372.993285] loop0: rw=0, want=18442984958116443110, limit=264192 [ 372.999761] attempt to access beyond end of device [ 373.004735] loop0: rw=0, want=18442984958116443112, limit=264192 [ 373.011213] attempt to access beyond end of device [ 373.016398] loop0: rw=0, want=18442984958116443114, limit=264192 [ 373.022617] attempt to access beyond end of device [ 373.027866] loop0: rw=0, want=18442984958116442996, limit=264192 [ 373.034077] attempt to access beyond end of device [ 373.039340] loop0: rw=0, want=18442984958116442998, limit=264192 [ 373.045534] attempt to access beyond end of device [ 373.050854] loop0: rw=0, want=18442984958116443000, limit=264192 [ 373.057294] attempt to access beyond end of device [ 373.062267] loop0: rw=0, want=18442984958116443002, limit=264192 [ 373.068998] attempt to access beyond end of device [ 373.073976] loop0: rw=0, want=18442984958116443108, limit=264192 [ 373.080440] attempt to access beyond end of device [ 373.085426] loop0: rw=0, want=18442984958116443110, limit=264192 [ 373.091893] attempt to access beyond end of device [ 373.097100] loop0: rw=0, want=18442984958116443112, limit=264192 [ 373.103298] attempt to access beyond end of device [ 373.108566] loop0: rw=0, want=18442984958116443114, limit=264192 [ 373.114802] attempt to access beyond end of device [ 373.120066] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.126565] attempt to access beyond end of device [ 373.131541] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.138031] attempt to access beyond end of device [ 373.143010] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.149470] attempt to access beyond end of device [ 373.154458] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.160969] attempt to access beyond end of device [ 373.166149] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.172380] attempt to access beyond end of device [ 373.177967] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.184168] attempt to access beyond end of device [ 373.189528] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.196025] attempt to access beyond end of device [ 373.201000] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.207557] attempt to access beyond end of device [ 373.212546] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.219042] attempt to access beyond end of device [ 373.224024] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.230580] attempt to access beyond end of device [ 373.235588] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.242188] attempt to access beyond end of device [ 373.247416] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.253636] attempt to access beyond end of device [ 373.258904] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.265099] attempt to access beyond end of device [ 373.270365] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.276846] attempt to access beyond end of device [ 373.281857] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.288629] attempt to access beyond end of device [ 373.293605] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.300175] attempt to access beyond end of device [ 373.305148] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.311629] attempt to access beyond end of device [ 373.316822] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.323018] attempt to access beyond end of device [ 373.328276] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.334473] attempt to access beyond end of device [ 373.339754] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.346214] attempt to access beyond end of device 08:08:49 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 08:08:49 executing program 4: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480), 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x800009, 0x4}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x0, 0x0, 0x9, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880)='/dev/hwrng\x00', 0x800, 0x0) splice(r0, &(0x7f0000000380), r1, &(0x7f00000003c0), 0x9d, 0x8) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x100) fsetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="62743000123201bb9b493b778ed3c7ecf22888546d751c9a8073f1f7b1445f24b528ce90519385bb763799611fb900000000f30000000000000000000000"], &(0x7f0000000640)='lo8vboxnet0\x00', 0xc, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000006c0)=0xffffffff7fffffff, 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', r3, &(0x7f00000007c0)='./file0\x00', 0x7) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000800)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 08:08:49 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 08:08:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:49 executing program 7: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="fadcaee310e7eaeb341a4d782d194c26dec455b90ae37757c72e9ea16c02e590435b312361e726051945eefe8cfe5aa37cfe94d0c8587278329a8176fb4aff024226e1222ef57afb568e36623929c198a722987b3d9359b773047e2f0dbea43338c5930ab6cae5f9889a85890b199f8c966f2ac8bbefc84fe6f0f9c5b111d59f05e72397d7575b9f11a0a5cc74a814498017fe4ef1e9a9d16b78c7b682cbcb6ec77985c4f2c82924a9f62030cc584088018b25c9e4f939a3dda39d26fdafa79759e0c619a88471f7e4fcd630f11b4ca2bcb025850f74771e5ebc524f45ae90f4d5fcd9da7bb588699c47a1c4580b694cdda7958ee13f61a2f8d8b8a02c032b34") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=""/40, &(0x7f00000000c0)=0xffffffffffffffe3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000580)=""/218, 0xda) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x4000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000340)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000700)=""/226) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 08:08:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 373.351192] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.357672] attempt to access beyond end of device [ 373.362647] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.369196] attempt to access beyond end of device [ 373.374174] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.388917] attempt to access beyond end of device [ 373.400769] loop0: rw=0, want=18442984958116443050, limit=264192 08:08:50 executing program 5: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 373.428434] attempt to access beyond end of device 08:08:50 executing program 7: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000000)=""/40, &(0x7f00000000c0)=0xffffffffffffffe3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000580)=""/218, 0xda) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x4000) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000340)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000700)=""/226) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:50 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 373.469126] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.496159] attempt to access beyond end of device [ 373.523556] loop0: rw=0, want=18442984958116443046, limit=264192 [ 373.561053] attempt to access beyond end of device 08:08:50 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 08:08:50 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d794b1ca05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 373.596781] loop0: rw=0, want=18442984958116443048, limit=264192 [ 373.642336] attempt to access beyond end of device [ 373.674672] loop0: rw=0, want=18442984958116443050, limit=264192 [ 373.708889] attempt to access beyond end of device [ 373.733481] loop0: rw=0, want=18442984958116443044, limit=264192 [ 373.766176] attempt to access beyond end of device 08:08:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/53, 0x35, 0x0) [ 373.817566] loop0: rw=0, want=18442984958116443046, limit=264192 08:08:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 373.882011] attempt to access beyond end of device 08:08:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/53, 0x35, 0x0) [ 373.917366] loop0: rw=0, want=18442984958116443048, limit=264192 08:08:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 373.966117] attempt to access beyond end of device [ 374.003526] loop0: rw=0, want=18442984958116443050, limit=264192 [ 374.048725] attempt to access beyond end of device [ 374.085350] loop0: rw=0, want=18442984958116443044, limit=264192 [ 374.124853] attempt to access beyond end of device [ 374.153978] loop0: rw=0, want=18442984958116443046, limit=264192 [ 374.186876] attempt to access beyond end of device [ 374.236699] loop0: rw=0, want=18442984958116443048, limit=264192 [ 374.281184] attempt to access beyond end of device [ 374.303342] loop0: rw=0, want=18442984958116443050, limit=264192 [ 374.325469] attempt to access beyond end of device [ 374.342718] loop0: rw=0, want=18442984958116443044, limit=264192 [ 374.362684] attempt to access beyond end of device [ 374.380623] loop0: rw=0, want=18442984958116443046, limit=264192 08:08:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/53, 0x35, 0x0) 08:08:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) [ 374.415354] attempt to access beyond end of device [ 374.446236] loop0: rw=0, want=18442984958116443048, limit=264192 [ 374.493409] attempt to access beyond end of device 08:08:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x12001) ioctl$VT_RELDISP(r0, 0x5605) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x3}, 0x4) unshare(0x8000400) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/pktcdvd/control\x00', 0x400000, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000003c0)) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)="38c13251726176dc15777f14fe4b041fd46e18db67b85b9978d7d5676629992115876884131176d43b71b71f216c65b7138fd337b5a54dc8ecd138a3e7b8e5e9dbed46289690fa853fc67829ebd683e304bed6dbe8b7e1f648b5472a71c5c1502ca4b592d84b642e738585fcf0addfeca80ea64dfa41b81318a901bc51f23698bcb9fe46ab02b5a8eed13247", 0x8c) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000034ffe)='\x00 ', 0x0) write$selinux_context(r3, &(0x7f0000000280)='system_u:object_r:iptables_conf_t:s0\x00', 0x25) r4 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x101802) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000340)={0x45, 0x0, {0x3, 0xfffffffffffffffd, 0x2, 0x3, 0x9}}) r5 = dup2(r4, r3) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r5, &(0x7f0000048fe4)=[{0x0, 0x1fd, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue={0x0, {0x100000001}}}], 0xfffffec3) timerfd_gettime(r5, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e6661", 0xa}], 0x0, &(0x7f0000000240)=ANY=[]) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 08:08:51 executing program 4: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 08:08:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/53, 0x35, 0x0) 08:08:51 executing program 5: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000010000000000005ec85499799f8c2ff1fd8c10d2"], 0x1) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2c}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 374.514340] loop0: rw=0, want=18442984958116443050, limit=264192 [ 374.549093] attempt to access beyond end of device 08:08:51 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 08:08:51 executing program 1: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e00)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000640)="0fb1958ba25fcb8a806cb5d2612d6897f9d28ddf0c80b7f371046bfd017b5463", 0x20}], 0x1, &(0x7f0000002240)}], 0x1, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) [ 374.571884] loop0: rw=0, want=18442984958116443236, limit=264192 [ 374.624974] attempt to access beyond end of device 08:08:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000140)=0x80, 0x0) shutdown(r0, 0x1) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) [ 374.650125] loop0: rw=0, want=18442984958116443238, limit=264192 [ 374.662424] FAT-fs (loop6): bogus number of reserved sectors [ 374.662430] FAT-fs (loop6): Can't find a valid FAT filesystem [ 374.743099] attempt to access beyond end of device [ 374.770115] loop0: rw=0, want=18442984958116443240, limit=264192 [ 374.796329] attempt to access beyond end of device [ 374.816809] loop0: rw=0, want=18442984958116443242, limit=264192 08:08:51 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) open$dir(&(0x7f0000000340)='./file0\x00', 0x400000000040, 0x0) r1 = inotify_init1(0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 374.841938] attempt to access beyond end of device [ 374.877284] loop0: rw=0, want=18442984958116442980, limit=264192 [ 374.909732] attempt to access beyond end of device [ 374.935606] loop0: rw=0, want=18442984958116442982, limit=264192 [ 374.969265] attempt to access beyond end of device [ 374.995883] loop0: rw=0, want=18442984958116442984, limit=264192 [ 375.029199] attempt to access beyond end of device [ 375.055192] loop0: rw=0, want=18442984958116442986, limit=264192 [ 375.089310] attempt to access beyond end of device [ 375.116622] loop0: rw=0, want=18442984958116442980, limit=264192 [ 375.145327] attempt to access beyond end of device [ 375.163708] loop0: rw=0, want=18442984958116442982, limit=264192 [ 375.186641] attempt to access beyond end of device [ 375.206265] loop0: rw=0, want=18442984958116442984, limit=264192 [ 375.230275] attempt to access beyond end of device [ 375.249837] loop0: rw=0, want=18442984958116442986, limit=264192 [ 375.272043] attempt to access beyond end of device [ 375.291586] loop0: rw=0, want=18442984958116442980, limit=264192 [ 375.319294] attempt to access beyond end of device [ 375.338215] loop0: rw=0, want=18442984958116442982, limit=264192 [ 375.383856] attempt to access beyond end of device [ 375.458384] loop0: rw=0, want=18442984958116442984, limit=264192 [ 375.479726] attempt to access beyond end of device [ 375.486577] loop0: rw=0, want=18442984958116442986, limit=264192 08:08:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0xffffffff80000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 08:08:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000180)='user\x00', &(0x7f0000000240), &(0x7f0000000280)="a2", 0x1, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 08:08:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x3fe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x40000000000010c, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400090}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xe4, r3, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x630}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc85}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x71}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, [], 0xa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x8}]}]}, 0x17e}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 08:08:52 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) [ 375.506132] attempt to access beyond end of device [ 375.511118] loop0: rw=0, want=18442984958116442980, limit=264192 [ 375.528231] attempt to access beyond end of device 08:08:52 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000fe000000bc4f00000007002e2f66696c6530"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f00000000c0)='./file0/file0\x00', 0x30101, 0x0) 08:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000d11000), &(0x7f0000000000)=0x4) 08:08:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000600000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@stripe={'stripe'}}]}) [ 375.560599] loop0: rw=0, want=18442984958116442982, limit=264192 [ 375.615757] attempt to access beyond end of device [ 375.636091] EXT4-fs (loop2): bad block size 65536 [ 375.654923] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:08:52 executing program 4: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:52 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x3, 0x7f, 0xc8}, 0x14) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, "2bfad2f687cba212f07ba6d0668ff0998c00cb1e50bafb115ef6f1e24a13df4c4a621f1e56012b04a1e912d55f778185a8e05845c8d56bb12bddf287eb406cfb", "d1ba49a35ad9f307a796f71399320208c2a03fce31fb438918eb36aab0272f36", [0x6, 0x8]}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r3, r2) 08:08:52 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 08:08:52 executing program 5: r0 = dup(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000240)="2590e75c412f44bec81babcbe5d57f4138", 0x11, 0x4004040, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x60002004}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000280)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) write$9p(r2, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9fe", 0x56) sendto$inet(r4, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) writev(r4, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:52 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000600000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@stripe={'stripe'}}]}) [ 375.677648] EXT4-fs (loop2): bad block size 65536 08:08:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000600000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@stripe={'stripe'}}]}) [ 375.776304] loop0: rw=0, want=18442984958116442984, limit=264192 [ 375.801941] EXT4-fs (loop2): bad block size 65536 08:08:52 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 375.850203] attempt to access beyond end of device 08:08:52 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) 08:08:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100020400000066000000c9030000ec000204000000000600000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@stripe={'stripe'}}]}) [ 375.878449] EXT4-fs (loop2): bad block size 65536 08:08:52 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 375.929503] loop0: rw=0, want=18442984958116442986, limit=264192 [ 375.970355] attempt to access beyond end of device [ 375.978090] EXT4-fs (loop2): bad block size 65536 [ 376.041406] loop0: rw=0, want=18442984958116442980, limit=264192 [ 376.085299] attempt to access beyond end of device [ 376.092973] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 376.154590] loop0: rw=0, want=18442984958116442982, limit=264192 [ 376.183706] attempt to access beyond end of device [ 376.201220] loop0: rw=0, want=18442984958116442984, limit=264192 [ 376.223757] attempt to access beyond end of device [ 376.253425] loop0: rw=0, want=18442984958116442986, limit=264192 [ 376.272599] attempt to access beyond end of device [ 376.285835] loop0: rw=0, want=18442984958116442996, limit=264192 [ 376.298723] attempt to access beyond end of device [ 376.310532] loop0: rw=0, want=18442984958116442998, limit=264192 [ 376.325879] attempt to access beyond end of device [ 376.337802] loop0: rw=0, want=18442984958116443000, limit=264192 [ 376.350042] attempt to access beyond end of device 08:08:52 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) 08:08:52 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 08:08:52 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:52 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x3, 0x7f, 0xc8}, 0x14) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, "2bfad2f687cba212f07ba6d0668ff0998c00cb1e50bafb115ef6f1e24a13df4c4a621f1e56012b04a1e912d55f778185a8e05845c8d56bb12bddf287eb406cfb", "d1ba49a35ad9f307a796f71399320208c2a03fce31fb438918eb36aab0272f36", [0x6, 0x8]}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r3, r2) 08:08:52 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:52 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000), 0x1c) clone(0x2000000, &(0x7f0000000140)="2fe9fd84145b1923e602aac643d3c56ff52a23d1751dab3b6b21da87c8aa899d", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)="16e5985f7610b3e2239d684a6222c2443394ddd04e24562f2b5be3e0ab7a359341e8bf5a43d478d306f4f1cc5f5a2a28ac8bffa5307c07a0d33f6285af7ee50cf9e953e1f59b7bd959cd359b6c039c003182850d36bbcae85ac5e5a8f9f3a0bab8a07d78f1ab5f6f2a06384127de0b9970f4db74cd7bca7a5bf3f359") memfd_create(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[{0xf, 0x8}, {0xe, 0x6}, {0x0, 0x10001}, {0x7, 0x4}], 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) [ 376.361740] loop0: rw=0, want=18442984958116443002, limit=264192 [ 376.376322] attempt to access beyond end of device [ 376.388195] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:53 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 08:08:53 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) [ 376.415762] attempt to access beyond end of device [ 376.461043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 376.519679] loop0: rw=0, want=18442984958116442982, limit=264192 [ 376.541204] attempt to access beyond end of device [ 376.546601] loop0: rw=0, want=18442984958116442984, limit=264192 [ 376.555152] attempt to access beyond end of device [ 376.566326] loop0: rw=0, want=18442984958116442986, limit=264192 [ 376.591490] attempt to access beyond end of device [ 376.597767] loop0: rw=0, want=18442984958116442980, limit=264192 [ 376.604031] attempt to access beyond end of device [ 376.612414] loop0: rw=0, want=18442984958116442982, limit=264192 [ 376.621749] attempt to access beyond end of device [ 376.630402] loop0: rw=0, want=18442984958116442984, limit=264192 08:08:53 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:53 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:53 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x3, 0x7f, 0xc8}, 0x14) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, "2bfad2f687cba212f07ba6d0668ff0998c00cb1e50bafb115ef6f1e24a13df4c4a621f1e56012b04a1e912d55f778185a8e05845c8d56bb12bddf287eb406cfb", "d1ba49a35ad9f307a796f71399320208c2a03fce31fb438918eb36aab0272f36", [0x6, 0x8]}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r3, r2) 08:08:53 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) 08:08:53 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 376.639854] attempt to access beyond end of device [ 376.644861] loop0: rw=0, want=18442984958116442986, limit=264192 [ 376.655465] attempt to access beyond end of device [ 376.666715] loop0: rw=0, want=18442984958116442980, limit=264192 [ 376.689516] attempt to access beyond end of device [ 376.706904] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 376.747085] loop0: rw=0, want=18442984958116442982, limit=264192 [ 376.753597] attempt to access beyond end of device [ 376.765073] loop0: rw=0, want=18442984958116442984, limit=264192 [ 376.782880] attempt to access beyond end of device [ 376.788289] loop0: rw=0, want=18442984958116442986, limit=264192 08:08:53 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) 08:08:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="240000001a0025f00087b404feff141c0a0b5aff6e10b510ae11ec4a050002004ab4ac14", 0x24) 08:08:53 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0x1bf}], 0x1b6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x0) 08:08:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000001e0007031dfffd946f61830020200a00090003fcff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 08:08:53 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 08:08:53 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x3, 0x7f, 0xc8}, 0x14) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, "2bfad2f687cba212f07ba6d0668ff0998c00cb1e50bafb115ef6f1e24a13df4c4a621f1e56012b04a1e912d55f778185a8e05845c8d56bb12bddf287eb406cfb", "d1ba49a35ad9f307a796f71399320208c2a03fce31fb438918eb36aab0272f36", [0x6, 0x8]}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r3, r2) [ 376.794663] attempt to access beyond end of device [ 376.804884] loop0: rw=0, want=18442984958116442980, limit=264192 [ 376.826326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. 08:08:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={"5450524f58590000000000800200"}, &(0x7f0000000240)=0xffffffb1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) ioctl$KDENABIO(r3, 0x4b36) fchdir(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) preadv(r4, &(0x7f00000002c0), 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000180)) 08:08:53 executing program 6: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2) [ 376.836140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 376.853945] attempt to access beyond end of device [ 376.858955] loop0: rw=0, want=18442984958116442982, limit=264192 [ 376.892728] device lo entered promiscuous mode [ 376.905175] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 376.996766] attempt to access beyond end of device [ 377.008966] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.027951] attempt to access beyond end of device [ 377.039713] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.052829] attempt to access beyond end of device [ 377.064649] loop0: rw=0, want=18442984958116442980, limit=264192 [ 377.077658] attempt to access beyond end of device [ 377.088852] loop0: rw=0, want=18442984958116442982, limit=264192 [ 377.101860] attempt to access beyond end of device [ 377.112521] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.121318] attempt to access beyond end of device [ 377.126366] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.132650] attempt to access beyond end of device [ 377.138512] loop0: rw=0, want=18442984958116442980, limit=264192 [ 377.144779] attempt to access beyond end of device [ 377.149838] loop0: rw=0, want=18442984958116442982, limit=264192 [ 377.156572] attempt to access beyond end of device [ 377.161595] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.167853] attempt to access beyond end of device [ 377.172869] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.179174] attempt to access beyond end of device [ 377.184201] loop0: rw=0, want=18442984958116442980, limit=264192 [ 377.190473] attempt to access beyond end of device [ 377.195506] loop0: rw=0, want=18442984958116442982, limit=264192 [ 377.201793] attempt to access beyond end of device [ 377.206878] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.213120] attempt to access beyond end of device [ 377.218488] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.224728] attempt to access beyond end of device [ 377.234259] loop0: rw=0, want=18442984958116442980, limit=264192 [ 377.244418] attempt to access beyond end of device 08:08:53 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:53 executing program 4: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) 08:08:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f00000001c0)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000980)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r0) 08:08:53 executing program 3: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 08:08:53 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 08:08:53 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000240)="0581c7000500000000000000ffa2ad88050000000000008c39160aaacb57a80000067d1a80e19e33e3c2e7725f4a5861153709000000f7402810247f0139d643ba0708e265756fe5eb8f5972eaecfffc2bd9e9aba5568a12843d4342277bd6adf74af03e90f5490f2a38ff07e4b0a084b53a683747f955a47ddc7100080000395da1a7ba8a7069cdb5f4eff4aae8b98ccd4245ad64ceaa7ad4974418b715a624f2cfdaf236512e17960229a1b3bc79b3603a800292fa7c36fb4f6c1342c60e17e6539f6bfeef0bae71fd57b9798d8b6370", 0xd1, 0x0, &(0x7f0000000000)={0xa, 0x100200000800, 0x8000000000006, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000005740)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/246, 0xf6}], 0x1, &(0x7f00000007c0)=""/52, 0x34}}], 0x1, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) 08:08:53 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x2000c2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) fstat(r0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x2a9) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000000a, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r4 = accept(r1, 0x0, &(0x7f0000000040)) close(r4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000240)={{0x9}, 0x1, 0x8, 0x401, {0x6, 0x7fffffff}, 0x5, 0x1}) r6 = memfd_create(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0) getsockopt$packet_int(r6, 0x107, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[], 0x0) execveat(r6, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x0, 0x2, 0x6}}, 0x14) gettid() getpgid(0x0) [ 377.249493] loop0: rw=0, want=18442984958116442982, limit=264192 [ 377.255777] attempt to access beyond end of device [ 377.260773] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.267853] attempt to access beyond end of device [ 377.272849] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.279139] attempt to access beyond end of device [ 377.284132] loop0: rw=0, want=18442984958116442980, limit=264192 [ 377.291414] attempt to access beyond end of device [ 377.296453] loop0: rw=0, want=18442984958116442982, limit=264192 08:08:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x8000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x100000000, 0x3, 0x8000, 0xc2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 377.313892] attempt to access beyond end of device [ 377.327216] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.353643] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.358479] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.471636] buffer_io_error: 127 callbacks suppressed [ 377.471643] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 377.548034] attempt to access beyond end of device [ 377.586572] loop0: rw=0, want=18442984958116442986, limit=264192 [ 377.619525] Buffer I/O error on dev loop0p105, logical block 3, async page read 08:08:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:54 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERRORu(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="13000000070100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) [ 377.649162] attempt to access beyond end of device 08:08:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x7) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f00000000c0)="4900000019007f5300fe01b2a4a280930a", 0x11}], 0x1, &(0x7f0000000400)}, 0x0) [ 377.687430] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:54 executing program 4: seccomp(0x0, 0x1, &(0x7f0000028ff0)={0x0, &(0x7f00000b3000)}) 08:08:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x0, @local}}) 08:08:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000), &(0x7f0000000140)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) close(r3) dup3(r1, r2, 0x0) [ 377.770856] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 377.842307] attempt to access beyond end of device 08:08:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={"5450524f58590000000000800200"}, &(0x7f0000000240)=0xffffffb1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) ioctl$KDENABIO(r3, 0x4b36) fchdir(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) preadv(r4, &(0x7f00000002c0), 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000180)) 08:08:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 377.884845] loop0: rw=0, want=18442984958116442982, limit=264192 [ 377.908583] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 377.929247] attempt to access beyond end of device [ 377.941908] loop0: rw=0, want=18442984958116442984, limit=264192 [ 377.982335] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 378.050276] attempt to access beyond end of device [ 378.062283] loop0: rw=0, want=18442984958116442986, limit=264192 [ 378.075565] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 378.092419] attempt to access beyond end of device [ 378.104440] loop0: rw=0, want=18442984958116442980, limit=264192 [ 378.133033] Buffer I/O error on dev loop0p105, logical block 0, async page read 08:08:54 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="428e797bf6fe6dbc966e4b2203f4aede1db2296372cf15291f62348ad65c44813926c7dc1214f534dd4e0dd82988f60a3575466ef6ad44ae553ca6773ef147bcdd32081d07c6ccc8a0c611f40f5497bae86e7e0d70a42927b22153b7c87e88ff8fa1bff66063854aa877c6b83554ea96672c608116528ddbbc2483837840f0eaf56054f5d7621074d480073c49e270c2bfd31f26a9ba029afb35fe92bc7f609a8255a9830dbc2e076f92379f5fed8d45d475ebf0f581509feb1da5170db57b21cc7cacc739a01dafc897e51632b9be41e2f966b7e34525ea40f58d3b5948ac5c3a42dfadc6eaeea395cc22fb3d834400f37ffa9d4c07390b55c334cd92713402") clock_gettime(0x0, &(0x7f0000000140)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x2b, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e21, 0x4, 'lblcr\x00', 0x5, 0x7, 0x25}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x200000007f, 0x40000000001402) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000006c0)=""/4096) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) write$tun(r3, &(0x7f00000005c0)={@void, @val={0x2, 0x4, 0x3, 0x4c1, 0x8, 0x80000000}, @ipx={0xffff, 0x88, 0x95d0, 0x0, {@current, @random="025b874847ae", 0x7}, {@broadcast, @current, 0x3}, "79a8d6592db4379bce458efa0fe419646834aba6fa9223916ef67206626964a0ab96c42bcbb17462e7bf6ed363b6b5ea7c8e3712fc1fd52f8c30b4df423604f42fb115286bc04c032c6239119c74193165f1b533846b313974ec1a78751345a40deacb31c23fcd50ea28"}}, 0x92) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0xffffffffffffffff, 0x0, 0xc8}, 0xfffffffffffffe46) syslog(0x2, &(0x7f00000017c0)=""/231, 0xe7) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) 08:08:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:54 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 378.160181] attempt to access beyond end of device 08:08:54 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 378.206685] loop0: rw=0, want=18442984958116442982, limit=264192 [ 378.238355] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 378.281241] attempt to access beyond end of device 08:08:54 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 378.328681] loop0: rw=0, want=18442984958116442984, limit=264192 [ 378.377151] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 378.435304] attempt to access beyond end of device [ 378.465752] loop0: rw=0, want=18442984958116442986, limit=264192 [ 378.501082] Buffer I/O error on dev loop0p105, logical block 3, async page read 08:08:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x8000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x100000000, 0x3, 0x8000, 0xc2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 378.549061] attempt to access beyond end of device [ 378.583014] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:55 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 08:08:55 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 379.207278] attempt to access beyond end of device [ 379.212279] loop0: rw=0, want=18442984958116442982, limit=264192 [ 379.245819] attempt to access beyond end of device [ 379.250792] loop0: rw=0, want=18442984958116442984, limit=264192 08:08:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={"5450524f58590000000000800200"}, &(0x7f0000000240)=0xffffffb1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) ioctl$KDENABIO(r3, 0x4b36) fchdir(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) preadv(r4, &(0x7f00000002c0), 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000180)) [ 379.288290] attempt to access beyond end of device [ 379.293260] loop0: rw=0, want=18442984958116442986, limit=264192 [ 379.345829] attempt to access beyond end of device [ 379.351100] loop0: rw=0, want=18442984958116443108, limit=264192 [ 379.370285] attempt to access beyond end of device [ 379.385619] loop0: rw=0, want=18442984958116443110, limit=264192 [ 379.407378] attempt to access beyond end of device [ 379.425551] loop0: rw=0, want=18442984958116443112, limit=264192 [ 379.446009] attempt to access beyond end of device 08:08:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x6}}, {@two_active_logs='active_logs=2'}, {@background_gc_off='background_gc=off'}]}) [ 379.480430] loop0: rw=0, want=18442984958116443114, limit=264192 [ 379.511437] attempt to access beyond end of device 08:08:56 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:56 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 379.528326] loop0: rw=0, want=18442984958116443108, limit=264192 [ 379.558462] f2fs_msg: 30 callbacks suppressed 08:08:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x6}}, {@two_active_logs='active_logs=2'}, {@background_gc_off='background_gc=off'}]}) [ 379.558469] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 379.558476] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 379.558766] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off 08:08:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x6}}, {@two_active_logs='active_logs=2'}, {@background_gc_off='background_gc=off'}]}) [ 379.558816] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 379.558822] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 379.559059] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off 08:08:56 executing program 1: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000300)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x6}}, {@two_active_logs='active_logs=2'}, {@background_gc_off='background_gc=off'}]}) [ 379.610027] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 379.610034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 379.610731] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 379.610777] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 380.008747] attempt to access beyond end of device 08:08:56 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 380.046589] loop0: rw=0, want=18442984958116443110, limit=264192 [ 380.052829] attempt to access beyond end of device 08:08:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 380.093256] loop0: rw=0, want=18442984958116443112, limit=264192 [ 380.132314] attempt to access beyond end of device 08:08:56 executing program 1: clock_getres(0x2, &(0x7f0000000300)) [ 380.170045] loop0: rw=0, want=18442984958116443114, limit=264192 [ 380.218210] attempt to access beyond end of device 08:08:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) [ 380.243648] loop0: rw=0, want=18442984958116442996, limit=264192 [ 380.273873] attempt to access beyond end of device [ 380.302190] loop0: rw=0, want=18442984958116442998, limit=264192 [ 380.324040] attempt to access beyond end of device [ 380.340420] loop0: rw=0, want=18442984958116443000, limit=264192 [ 380.369505] attempt to access beyond end of device [ 380.390435] loop0: rw=0, want=18442984958116443002, limit=264192 [ 380.413785] attempt to access beyond end of device [ 380.436706] loop0: rw=0, want=18442984958116442980, limit=264192 [ 380.459784] attempt to access beyond end of device [ 380.483906] loop0: rw=0, want=18442984958116442982, limit=264192 [ 380.504461] attempt to access beyond end of device [ 380.522951] loop0: rw=0, want=18442984958116442984, limit=264192 [ 380.539638] attempt to access beyond end of device [ 380.552319] loop0: rw=0, want=18442984958116442986, limit=264192 [ 380.558806] attempt to access beyond end of device [ 380.571366] loop0: rw=0, want=18442984958116442980, limit=264192 [ 380.589044] attempt to access beyond end of device [ 380.604498] loop0: rw=0, want=18442984958116442982, limit=264192 [ 380.615911] attempt to access beyond end of device [ 380.621421] loop0: rw=0, want=18442984958116442984, limit=264192 [ 380.627772] attempt to access beyond end of device [ 380.632793] loop0: rw=0, want=18442984958116442986, limit=264192 [ 380.640344] attempt to access beyond end of device [ 380.645357] loop0: rw=0, want=18442984958116442988, limit=264192 [ 380.658077] attempt to access beyond end of device [ 380.667204] loop0: rw=0, want=18442984958116442990, limit=264192 [ 380.678219] attempt to access beyond end of device [ 380.683274] loop0: rw=0, want=18442984958116442992, limit=264192 [ 380.689558] attempt to access beyond end of device [ 380.694540] loop0: rw=0, want=18442984958116442994, limit=264192 [ 380.700889] attempt to access beyond end of device [ 380.706112] loop0: rw=0, want=18442984958116442996, limit=264192 [ 380.712529] attempt to access beyond end of device [ 380.717761] loop0: rw=0, want=18442984958116442998, limit=264192 [ 380.723988] attempt to access beyond end of device [ 380.728989] loop0: rw=0, want=18442984958116443000, limit=264192 [ 380.735186] attempt to access beyond end of device [ 380.740198] loop0: rw=0, want=18442984958116443002, limit=264192 [ 380.746700] attempt to access beyond end of device [ 380.751676] loop0: rw=0, want=18442984958116442980, limit=264192 [ 380.757880] attempt to access beyond end of device [ 380.762852] loop0: rw=0, want=18442984958116442982, limit=264192 [ 380.769736] attempt to access beyond end of device [ 380.774722] loop0: rw=0, want=18442984958116442984, limit=264192 [ 380.780927] attempt to access beyond end of device 08:08:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x8000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x100000000, 0x3, 0x8000, 0xc2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 08:08:57 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) 08:08:57 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) 08:08:57 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = inotify_init1(0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x4, "2b08a27980cdd05e", "124f76d9f5ed860beb4c04643dc80ab9c338978e87319600a8bc56c1daa2a42a", 0x2, 0x6f}) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) [ 380.787105] loop0: rw=0, want=18442984958116442986, limit=264192 [ 380.794729] attempt to access beyond end of device [ 380.807728] loop0: rw=0, want=18442984958116442980, limit=264192 [ 380.820940] attempt to access beyond end of device [ 381.632681] loop0: rw=0, want=18442984958116442982, limit=264192 [ 381.643247] attempt to access beyond end of device [ 381.648614] loop0: rw=0, want=18442984958116442984, limit=264192 [ 381.654892] attempt to access beyond end of device [ 381.660229] loop0: rw=0, want=18442984958116442986, limit=264192 [ 381.666803] attempt to access beyond end of device [ 381.671855] loop0: rw=0, want=18442984958116442980, limit=264192 [ 381.678692] attempt to access beyond end of device [ 381.683740] loop0: rw=0, want=18442984958116442982, limit=264192 [ 381.690324] attempt to access beyond end of device [ 381.701122] loop0: rw=0, want=18442984958116442984, limit=264192 [ 381.714435] attempt to access beyond end of device [ 381.725256] loop0: rw=0, want=18442984958116442986, limit=264192 [ 381.739707] attempt to access beyond end of device [ 381.751198] loop0: rw=0, want=18442984958116442980, limit=264192 [ 381.757845] attempt to access beyond end of device [ 381.762889] loop0: rw=0, want=18442984958116442982, limit=264192 [ 381.769483] attempt to access beyond end of device [ 381.774536] loop0: rw=0, want=18442984958116442984, limit=264192 [ 381.781044] attempt to access beyond end of device [ 381.786355] loop0: rw=0, want=18442984958116442986, limit=264192 [ 381.796085] attempt to access beyond end of device [ 381.804739] loop0: rw=0, want=18442984958116442980, limit=264192 [ 381.811227] attempt to access beyond end of device [ 381.816486] loop0: rw=0, want=18442984958116442982, limit=264192 [ 381.822706] attempt to access beyond end of device [ 381.828155] loop0: rw=0, want=18442984958116442984, limit=264192 [ 381.834377] attempt to access beyond end of device [ 381.843204] loop0: rw=0, want=18442984958116442986, limit=264192 [ 381.849712] attempt to access beyond end of device [ 381.854685] loop0: rw=0, want=18442984958116442980, limit=264192 [ 381.861175] attempt to access beyond end of device [ 381.866674] loop0: rw=0, want=18442984958116442982, limit=264192 [ 381.872874] attempt to access beyond end of device [ 381.878886] loop0: rw=0, want=18442984958116442984, limit=264192 [ 381.885095] attempt to access beyond end of device [ 381.890380] loop0: rw=0, want=18442984958116442986, limit=264192 [ 381.896903] attempt to access beyond end of device [ 381.901884] loop0: rw=0, want=18442984958116442988, limit=264192 [ 381.908435] attempt to access beyond end of device [ 381.913432] loop0: rw=0, want=18442984958116442990, limit=264192 [ 381.919917] attempt to access beyond end of device [ 381.924886] loop0: rw=0, want=18442984958116442992, limit=264192 [ 381.931376] attempt to access beyond end of device [ 381.936613] loop0: rw=0, want=18442984958116442994, limit=264192 [ 381.942831] attempt to access beyond end of device [ 381.948245] loop0: rw=0, want=18442984958116443108, limit=264192 [ 381.954457] attempt to access beyond end of device [ 381.959709] loop0: rw=0, want=18442984958116443110, limit=264192 [ 381.966167] attempt to access beyond end of device [ 381.971146] loop0: rw=0, want=18442984958116443112, limit=264192 [ 381.977648] attempt to access beyond end of device [ 381.982623] loop0: rw=0, want=18442984958116443114, limit=264192 [ 381.989083] attempt to access beyond end of device [ 381.994057] loop0: rw=0, want=18442984958116442980, limit=264192 [ 382.000587] attempt to access beyond end of device [ 382.005556] loop0: rw=0, want=18442984958116442982, limit=264192 [ 382.012648] attempt to access beyond end of device [ 382.017856] loop0: rw=0, want=18442984958116442984, limit=264192 [ 382.024051] attempt to access beyond end of device [ 382.029259] loop0: rw=0, want=18442984958116442986, limit=264192 [ 382.035664] attempt to access beyond end of device [ 382.040886] loop0: rw=0, want=18442984958116442980, limit=264192 [ 382.047372] attempt to access beyond end of device [ 382.052360] loop0: rw=0, want=18442984958116442982, limit=264192 [ 382.059011] attempt to access beyond end of device [ 382.063987] loop0: rw=0, want=18442984958116442984, limit=264192 [ 382.070446] attempt to access beyond end of device [ 382.075432] loop0: rw=0, want=18442984958116442986, limit=264192 [ 382.082859] attempt to access beyond end of device [ 382.088092] loop0: rw=0, want=18442984958116447076, limit=264192 [ 382.094285] attempt to access beyond end of device [ 382.099517] loop0: rw=0, want=18442984958116447078, limit=264192 [ 382.106010] attempt to access beyond end of device [ 382.110944] loop0: rw=0, want=18442984958116447080, limit=264192 [ 382.117350] attempt to access beyond end of device [ 382.122522] loop0: rw=0, want=18442984958116447082, limit=264192 [ 382.129008] attempt to access beyond end of device [ 382.133943] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fchmod(0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000005c0)={0xff, 0xd119}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={"5450524f58590000000000800200"}, &(0x7f0000000240)=0xffffffb1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) eventfd(0x11) ioctl$KDENABIO(r3, 0x4b36) fchdir(r1) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62c4, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='s'], 0x1) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) preadv(r4, &(0x7f00000002c0), 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000180)) 08:08:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) 08:08:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 08:08:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) 08:08:58 executing program 7: inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001380)={'system_u:object_r:run_init_exec_t:s0', 0x20, 'system_u:object_r:xserver_misc_device_t:s0', 0x20, 0x0, 0x36}, 0x63) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x734010da, 0xa61b}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008910, &(0x7f00000001c0)="295ee1311f16") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000adafa0), 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000108000)=0xdd) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e23, @loopback}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 08:08:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2287, &(0x7f0000000280)) 08:08:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/201}], 0x0, &(0x7f0000000380)=""/84, 0xffffffffffffff0f}}], 0x1, 0x0, 0x0) 08:08:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x8000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x100000000, 0x3, 0x8000, 0xc2}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 08:08:58 executing program 0: socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000000400)={[{@fat=@check_relaxed='check=relaxed'}]}) 08:08:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000007c0)='./control\x00', 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {0x100000000}, 0x0, 0x8}, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x12, 0x109000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000006c0)="610e788300") getsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000480), &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1a833cee) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000003c0)={0x5, 0x0, 'client1\x00', 0x0, "1970ca4351a2a188", "42dfb9db746c87f0c8e652c608d9b2e3123c54412980298a0eb0d26e59077a66", 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/40, &(0x7f0000000280)=0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) [ 382.140921] attempt to access beyond end of device [ 382.146097] loop0: rw=0, want=18442984958116442982, limit=264192 [ 382.162406] attempt to access beyond end of device [ 382.172916] loop0: rw=0, want=18442984958116442984, limit=264192 [ 382.191333] attempt to access beyond end of device [ 382.222587] loop0: rw=0, want=18442984958116442986, limit=264192 [ 382.264078] attempt to access beyond end of device [ 382.310111] loop0: rw=0, want=18442984958116442980, limit=264192 08:08:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) 08:08:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) 08:08:58 executing program 7: inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001380)={'system_u:object_r:run_init_exec_t:s0', 0x20, 'system_u:object_r:xserver_misc_device_t:s0', 0x20, 0x0, 0x36}, 0x63) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x734010da, 0xa61b}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008910, &(0x7f00000001c0)="295ee1311f16") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000adafa0), 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000108000)=0xdd) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e23, @loopback}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) [ 382.387219] attempt to access beyond end of device 08:08:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount$9p_virtio(&(0x7f00000000c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x7ffffd, &(0x7f0000000380)=ANY=[]) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 382.444481] loop0: rw=0, want=18442984958116442982, limit=264192 08:08:59 executing program 7: inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001380)={'system_u:object_r:run_init_exec_t:s0', 0x20, 'system_u:object_r:xserver_misc_device_t:s0', 0x20, 0x0, 0x36}, 0x63) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x734010da, 0xa61b}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008910, &(0x7f00000001c0)="295ee1311f16") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000adafa0), 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000108000)=0xdd) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e23, @loopback}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 08:08:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) [ 382.502175] buffer_io_error: 81 callbacks suppressed [ 382.502183] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 382.627842] attempt to access beyond end of device [ 382.656842] loop0: rw=0, want=18442984958116442984, limit=264192 [ 382.675440] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 382.695993] attempt to access beyond end of device [ 382.707625] loop0: rw=0, want=18442984958116442986, limit=264192 [ 382.728612] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 382.755288] attempt to access beyond end of device [ 382.774626] loop0: rw=0, want=18442984958116442980, limit=264192 [ 382.798012] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 382.827629] attempt to access beyond end of device [ 382.844632] loop0: rw=0, want=18442984958116442982, limit=264192 [ 382.867054] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 382.898220] attempt to access beyond end of device [ 382.916504] loop0: rw=0, want=18442984958116442984, limit=264192 [ 382.945429] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 382.979756] attempt to access beyond end of device 08:08:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 08:08:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 08:08:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f67726f93746174000000000000000000000000000000", 0x2761, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40286608, 0x20000000) 08:08:59 executing program 7: inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x0, 0x0) write$selinux_validatetrans(r0, &(0x7f0000001380)={'system_u:object_r:run_init_exec_t:s0', 0x20, 'system_u:object_r:xserver_misc_device_t:s0', 0x20, 0x0, 0x36}, 0x63) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x734010da, 0xa61b}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r2 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x3}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008910, &(0x7f00000001c0)="295ee1311f16") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000adafa0), 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000325f23)=""/221, &(0x7f0000108000)=0xdd) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'veth1\x00', {0x2, 0x4e23, @loopback}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 08:08:59 executing program 1: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 08:08:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000007c0)='./control\x00', 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {0x100000000}, 0x0, 0x8}, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x12, 0x109000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000006c0)="610e788300") getsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000480), &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1a833cee) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000003c0)={0x5, 0x0, 'client1\x00', 0x0, "1970ca4351a2a188", "42dfb9db746c87f0c8e652c608d9b2e3123c54412980298a0eb0d26e59077a66", 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/40, &(0x7f0000000280)=0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 08:08:59 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$VT_RELDISP(r0, 0xb701) 08:08:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000007c0)='./control\x00', 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {0x100000000}, 0x0, 0x8}, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x12, 0x109000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000006c0)="610e788300") getsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000480), &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1a833cee) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000003c0)={0x5, 0x0, 'client1\x00', 0x0, "1970ca4351a2a188", "42dfb9db746c87f0c8e652c608d9b2e3123c54412980298a0eb0d26e59077a66", 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/40, &(0x7f0000000280)=0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) [ 383.004915] loop0: rw=0, want=18442984958116442986, limit=264192 [ 383.020346] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 383.031737] attempt to access beyond end of device [ 383.036996] loop0: rw=0, want=18442984958116442980, limit=264192 [ 383.043702] Buffer I/O error on dev loop0p105, logical block 0, async page read 08:08:59 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$VT_RELDISP(r0, 0xb701) [ 383.076329] attempt to access beyond end of device 08:08:59 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$VT_RELDISP(r0, 0xb701) 08:08:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x7, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0) [ 383.110816] device lo left promiscuous mode [ 383.140539] loop0: rw=0, want=18442984958116442982, limit=264192 08:08:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) [ 383.197516] Buffer I/O error on dev loop0p105, logical block 1, async page read 08:08:59 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$VT_RELDISP(r0, 0xb701) 08:08:59 executing program 1: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 08:08:59 executing program 6: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="6e73707fd782b742"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 383.213815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8249 sclass=netlink_route_socket pig=26865 comm=syz-executor1 [ 383.374986] attempt to access beyond end of device 08:09:00 executing program 1: sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000002c0)="72616d66730026f1729c6a430542f8e4fbeff6c5ef7798c63ae1352c19effe6dbf659369548e80103c80b9de13ced7fb74cc970cf1fb700256f6dbead1f38e5b69d25c23a5d71e77d1a993076b89517fd8f3803cbe0c2e45a4876a124ec9ef992e7c8ab08b86a1311a2b6744ef6be2230b74f92d588cc84d3ad580cd4076bc0d8be3d9b9562cac769b425ddaaedd960540d16ff7747ea761af655268", 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000000), 0x80000002) [ 383.400405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8249 sclass=netlink_route_socket pig=26899 comm=syz-executor1 [ 383.481314] loop0: rw=0, want=18442984958116442984, limit=264192 [ 383.524898] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 383.557379] attempt to access beyond end of device [ 383.578732] loop0: rw=0, want=18442984958116442986, limit=264192 [ 383.601141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8249 sclass=netlink_route_socket pig=26907 comm=syz-executor1 [ 383.673255] attempt to access beyond end of device [ 383.692451] loop0: rw=0, want=18442984958116442980, limit=264192 [ 383.713947] attempt to access beyond end of device [ 383.733472] loop0: rw=0, want=18442984958116442982, limit=264192 [ 383.755078] attempt to access beyond end of device [ 383.771960] loop0: rw=0, want=18442984958116442984, limit=264192 [ 383.794283] attempt to access beyond end of device [ 383.812419] loop0: rw=0, want=18442984958116442986, limit=264192 [ 383.830836] attempt to access beyond end of device [ 383.845104] loop0: rw=0, want=18442984958116442980, limit=264192 [ 383.862666] attempt to access beyond end of device [ 383.887705] loop0: rw=0, want=18442984958116442982, limit=264192 [ 383.902110] attempt to access beyond end of device [ 383.917885] loop0: rw=0, want=18442984958116442984, limit=264192 [ 383.931931] attempt to access beyond end of device [ 383.942564] loop0: rw=0, want=18442984958116442986, limit=264192 [ 383.955561] attempt to access beyond end of device [ 383.966334] loop0: rw=0, want=18442984958116442980, limit=264192 [ 383.979306] attempt to access beyond end of device [ 383.990975] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.003903] attempt to access beyond end of device [ 384.014635] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.028414] attempt to access beyond end of device [ 384.038478] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.053454] attempt to access beyond end of device [ 384.065834] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.080288] attempt to access beyond end of device 08:09:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 08:09:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000007c0)='./control\x00', 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {0x100000000}, 0x0, 0x8}, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x12, 0x109000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000006c0)="610e788300") getsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f0000000480), &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1a833cee) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000003c0)={0x5, 0x0, 'client1\x00', 0x0, "1970ca4351a2a188", "42dfb9db746c87f0c8e652c608d9b2e3123c54412980298a0eb0d26e59077a66", 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000240)=""/40, &(0x7f0000000280)=0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) [ 384.091702] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.111681] attempt to access beyond end of device [ 384.132469] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.165283] attempt to access beyond end of device [ 384.191416] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.249156] attempt to access beyond end of device [ 384.273611] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.295592] attempt to access beyond end of device [ 384.312694] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.333966] attempt to access beyond end of device [ 384.353637] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.374176] attempt to access beyond end of device [ 384.393421] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.421311] attempt to access beyond end of device [ 384.437259] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.451982] attempt to access beyond end of device [ 384.463641] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.479995] attempt to access beyond end of device [ 384.492574] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.507915] attempt to access beyond end of device [ 384.518525] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.537084] attempt to access beyond end of device [ 384.549359] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.565029] attempt to access beyond end of device [ 384.570606] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.586521] attempt to access beyond end of device [ 384.597877] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.610853] attempt to access beyond end of device [ 384.621477] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.636574] attempt to access beyond end of device [ 384.647191] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.660000] attempt to access beyond end of device [ 384.670481] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.682242] attempt to access beyond end of device [ 384.692736] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.705559] attempt to access beyond end of device [ 384.716085] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.727811] attempt to access beyond end of device [ 384.738303] loop0: rw=0, want=18442984958116443004, limit=264192 [ 384.751115] attempt to access beyond end of device [ 384.762012] loop0: rw=0, want=18442984958116443006, limit=264192 [ 384.768238] attempt to access beyond end of device [ 384.773164] loop0: rw=0, want=18442984958116443008, limit=264192 [ 384.781096] attempt to access beyond end of device [ 384.786071] loop0: rw=0, want=18442984958116443010, limit=264192 [ 384.792251] attempt to access beyond end of device [ 384.797341] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.803497] attempt to access beyond end of device [ 384.808469] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.814633] attempt to access beyond end of device [ 384.819712] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.825912] attempt to access beyond end of device [ 384.830842] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.837069] attempt to access beyond end of device [ 384.841999] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.848186] attempt to access beyond end of device [ 384.853725] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.859930] attempt to access beyond end of device [ 384.864857] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.871124] attempt to access beyond end of device [ 384.876117] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.882304] attempt to access beyond end of device [ 384.887485] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.893647] attempt to access beyond end of device [ 384.898615] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.904782] attempt to access beyond end of device [ 384.909754] loop0: rw=0, want=18442984958116442984, limit=264192 [ 384.915946] attempt to access beyond end of device [ 384.920875] loop0: rw=0, want=18442984958116442986, limit=264192 [ 384.927103] attempt to access beyond end of device [ 384.932039] loop0: rw=0, want=18442984958116443036, limit=264192 [ 384.938232] attempt to access beyond end of device [ 384.943164] loop0: rw=0, want=18442984958116443038, limit=264192 [ 384.949357] attempt to access beyond end of device [ 384.954291] loop0: rw=0, want=18442984958116443040, limit=264192 [ 384.960477] attempt to access beyond end of device [ 384.965407] loop0: rw=0, want=18442984958116443042, limit=264192 [ 384.971661] attempt to access beyond end of device [ 384.976616] loop0: rw=0, want=18442984958116442980, limit=264192 [ 384.982773] attempt to access beyond end of device [ 384.987746] loop0: rw=0, want=18442984958116442982, limit=264192 [ 384.994377] attempt to access beyond end of device [ 384.999567] loop0: rw=0, want=18442984958116442984, limit=264192 [ 385.005772] attempt to access beyond end of device [ 385.010698] loop0: rw=0, want=18442984958116442986, limit=264192 [ 385.016911] attempt to access beyond end of device [ 385.021843] loop0: rw=0, want=18442984958116442980, limit=264192 [ 385.028034] attempt to access beyond end of device [ 385.032964] loop0: rw=0, want=18442984958116442982, limit=264192 [ 385.039151] attempt to access beyond end of device [ 385.044085] loop0: rw=0, want=18442984958116442984, limit=264192 [ 385.050487] attempt to access beyond end of device [ 385.055420] loop0: rw=0, want=18442984958116442986, limit=264192 INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 572.565987] INFO: task syz-executor0:17805 blocked for more than 140 seconds. [ 572.573308] Not tainted 4.9.123-g520d10d3 #29 [ 572.578802] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.587171] syz-executor0 D26792 17805 1 0x00000004 [ 572.592968] ffff8801ab494800 0000000000000000 ffff8801d4975500 ffff8801d9a6b000 [ 572.604710] ffff8801db321c18 ffff8801aa3af4e0 ffffffff839f0ebd ffffffff81237907 [ 572.613222] 0000000000000000 ffff8801ab4950c0 0000000600000007 ffff8801db3224e8 [ 572.621635] Call Trace: [ 572.624233] [] ? __schedule+0x64d/0x1bd0 [ 572.630259] [] ? mark_held_locks+0xc7/0x130 [ 572.636535] [] ? rwsem_down_read_failed+0x1df/0x320 [ 572.643212] [] schedule+0x7f/0x1b0 [ 572.648709] [] rwsem_down_read_failed+0x1e4/0x320 [ 572.655214] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 572.662175] [] ? __lock_acquire+0x654/0x4070 [ 572.668570] [] ? retint_kernel+0x2d/0x2d [ 572.674937] [] call_rwsem_down_read_failed+0x18/0x30 [ 572.682107] [] down_read+0x52/0xb0 [ 572.687623] [] ? lookup_slow+0x141/0x470 [ 572.693340] [] lookup_slow+0x141/0x470 [ 572.699193] [] ? page_put_link+0xd0/0xd0 [ 572.704914] [] ? kmem_cache_alloc+0xbe/0x290 [ 572.711236] [] ? get_empty_filp+0x8f/0x380 [ 572.717368] [] ? path_openat+0xc1/0x3590 [ 572.723083] [] ? do_filp_open+0x197/0x270 [ 572.729143] [] ? do_sys_open+0x30d/0x5c0 [ 572.734853] [] ? SyS_open+0x2d/0x40 [ 572.740384] [] walk_component+0x716/0x1bb0 [ 572.746597] [] ? selinux_inode_permission+0x248/0x4b0 [ 572.753446] [] ? path_init+0x1580/0x1580 [ 572.759461] [] ? security_inode_permission+0xc5/0x100 [ 572.766746] [] ? __inode_permission2+0x9b/0x2d0 [ 572.773065] [] ? set_root+0x2ed/0x440 [ 572.778762] [] ? vfat_hashi+0x11a/0x380 [ 572.784385] [] link_path_walk+0x889/0x1200 [ 572.790544] [] ? walk_component+0x1bb0/0x1bb0 [ 572.796927] [] ? __mutex_init+0xca/0x100 [ 572.802643] [] path_openat+0x1ad/0x3590 [ 572.808598] [] ? save_stack+0xa9/0xd0 [ 572.814050] [] ? getname+0x19/0x20 [ 572.819517] [] ? do_sys_open+0x20b/0x5c0 [ 572.825231] [] ? SyS_open+0x2d/0x40 [ 572.830760] [] ? do_syscall_64+0x1a6/0x490 [ 572.836880] [] ? path_lookupat.isra.41+0x410/0x410 [ 572.843466] [] ? __lock_is_held+0xa2/0xf0 [ 572.849520] [] do_filp_open+0x197/0x270 [ 572.855144] [] ? may_open_dev+0xe0/0xe0 [ 572.861034] [] ? _raw_spin_unlock+0x2c/0x50 [ 572.867447] [] ? __alloc_fd+0x1d7/0x4a0 [ 572.873075] [] do_sys_open+0x30d/0x5c0 [ 572.879051] [] ? filp_open+0x70/0x70 [ 572.884418] [] SyS_open+0x2d/0x40 [ 572.889847] [] ? do_sys_open+0x5c0/0x5c0 [ 572.895561] [] do_syscall_64+0x1a6/0x490 [ 572.901552] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 572.908731] [ 572.908731] Showing all locks held in the system: [ 572.915053] 2 locks held by khungtaskd/519: [ 572.919385] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 572.928173] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 572.937938] 2 locks held by getty/3762: [ 572.941911] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 572.951314] #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 [ 572.961370] 1 lock held by syz-executor0/17805: [ 572.966055] #0: (&sb->s_type->i_mutex_key#23){++++++}, at: [] lookup_slow+0x141/0x470 [ 572.976490] 2 locks held by syz-executor0/26912: [ 572.981237] #0: (sb_writers#17){.+.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 572.990889] #1: (&sb->s_type->i_mutex_key#23){++++++}, at: [] path_openat+0xed5/0x3590 [ 573.001402] [ 573.003078] ============================================= [ 573.003078] [ 573.010974] NMI backtrace for cpu 1 [ 573.014610] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.123-g520d10d3 #29 [ 573.021978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.031331] ffff8801d84bfd08 ffffffff81eb9689 0000000000000000 0000000000000001 [ 573.039454] 0000000000000001 0000000000000001 ffffffff810b9fa0 ffff8801d84bfd40 [ 573.047553] ffffffff81ec49c7 0000000000000001 0000000000000000 0000000000000003 [ 573.055647] Call Trace: [ 573.058239] [] dump_stack+0xc1/0x128 [ 573.063606] [] ? irq_force_complete_move+0x320/0x320 [ 573.070365] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 573.076864] [] ? irq_force_complete_move+0x320/0x320 [ 573.083641] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 573.090747] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 573.097793] [] watchdog+0x6b4/0xa20 [ 573.103072] [] ? watchdog+0x11c/0xa20 [ 573.108547] [] kthread+0x26d/0x300 [ 573.113767] [] ? reset_hung_task_detector+0x20/0x20 [ 573.120462] [] ? kthread_park+0xa0/0xa0 [ 573.126098] [] ? __switch_to_asm+0x34/0x70 [ 573.131986] [] ? kthread_park+0xa0/0xa0 [ 573.137613] [] ? kthread_park+0xa0/0xa0 [ 573.143390] [] ret_from_fork+0x5c/0x70 [ 573.149097] Sending NMI from CPU 1 to CPUs 0: [ 573.154094] NMI backtrace for cpu 0 [ 573.157735] CPU: 0 PID: 26861 Comm: syz-executor0 Not tainted 4.9.123-g520d10d3 #29 [ 573.165525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.174875] task: ffff8801a4b04800 task.stack: ffff8801da398000 [ 573.180926] RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x20/0x50 [ 573.190289] RSP: 0018:ffff8801da39f258 EFLAGS: 00000046 [ 573.195737] RAX: ffff8801a4b04800 RBX: 0000000000000004 RCX: ffffc9000011f000 [ 573.203005] RDX: 0000000000000000 RSI: ffffffff81628ba6 RDI: ffff8801b92476a8 [ 573.210277] RBP: ffff8801da39f258 R08: ffff8801a4b05160 R09: 0000000000000001 [ 573.217543] R10: 0000000000000000 R11: 1ffff10034960a27 R12: ffff8801b9247690 [ 573.224813] R13: dffffc0000000000 R14: ffff8801b9247690 R15: 0000000000000003 [ 573.232083] FS: 00007f8fe835a700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 573.240464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.246344] CR2: 000000c423019000 CR3: 00000001cd471000 CR4: 00000000001606f0 [ 573.253614] DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 [ 573.260880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 573.268147] Stack: [ 573.270292] ffff8801da39f2a8c ffffffff81628ba6c 0000020006f080c0c 0000000000000041c [ 573.278514] ffff8801d5e605c0c 0000000000000001c ffffea0006f080dcc ffffea0006f080c0c [ 573.286739] 0000000000000200c dffffc0000000000c ffff8801da39f348c ffffffff81629b89c [ 573.295095] Call Trace: [ 573.297674] [] __find_get_block+0x66/0x4c0 [ 573.303552] [] __getblk_gfp+0x189/0x710 [ 573.309172] [] __bread_gfp+0x2d/0x270 [ 573.314759] [] fat__get_entry+0x4c8/0x8f0 [ 573.320549] [] ? fat_bmap+0x440/0x440 [ 573.325993] [] fat_search_long+0x277/0x1180 [ 573.331960] [] ? fat_parse_short+0x2190/0x2190 [ 573.338187] [] ? avc_has_perm+0x27d/0x4f0 [ 573.344120] [] ? __lock_is_held+0xa2/0xf0 [ 573.349913] [] ? mark_held_locks+0xc7/0x130 [ 573.356016] [] ? mutex_lock_nested+0x572/0x870 [ 573.362242] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 573.369078] [] ? mutex_lock_nested+0x596/0x870 [ 573.375303] [] ? vfat_lookup+0xd1/0x530 [ 573.380923] [] ? selinux_determine_inode_label+0x171/0x310 [ 573.388193] [] ? mutex_trylock+0x3e0/0x3e0 [ 573.394073] [] vfat_find+0x134/0x180 [ 573.399457] [] vfat_lookup+0xe1/0x530 [ 573.404903] [] ? vfat_unlink+0x2d0/0x2d0 [ 573.410611] [] ? selinux_inode_create+0x22/0x30 [ 573.416986] [] ? security_inode_create+0xd6/0x110 [ 573.423620] [] ? vfat_unlink+0x2d0/0x2d0 [ 573.429327] [] lookup_open+0x63d/0x1930 [ 573.434947] [] ? vfs_link+0x40/0x40 [ 573.440221] [] path_openat+0xef8/0x3590 [ 573.445837] [] ? path_lookupat.isra.41+0x410/0x410 [ 573.452411] [] ? debug_check_no_locks_freed+0x210/0x210 [ 573.459475] [] ? __lock_is_held+0xa2/0xf0 [ 573.465269] [] do_filp_open+0x197/0x270 [ 573.470888] [] ? may_open_dev+0xe0/0xe0 [ 573.476507] [] ? _raw_spin_unlock+0x2c/0x50 [ 573.482480] [] ? __alloc_fd+0x1d7/0x4a0 [ 573.488100] [] do_sys_open+0x30d/0x5c0 [ 573.493631] [] ? filp_open+0x70/0x70 [ 573.499049] [] ? do_futex+0x17c0/0x17c0 [ 573.504667] [] ? security_file_ioctl+0x8f/0xc0 [ 573.510891] [] SyS_openat+0x30/0x40 [ 573.516162] [] ? SyS_open+0x40/0x40 [ 573.521460] [] do_syscall_64+0x1a6/0x490 [ 573.527169] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 573.534099] Code: c0f c1f c84 c00 c00 c00 c00 c00 c0f c1f c00 c55 c48 c89 ce5 c65 c48 c8b c04 c25 cc0 c7d c01 c00 c65 c8b c15 c8c c6f ccb c7e c81 ce2 c00 c01 c1f c00 c48 c8b c75 c08 c75 c2b c<8b> c90 c80 c12 c00 c00 c83 cfa c02 c75 c20 c48 c8b c88 c88 c12 c00 c00 c8b c80 c84 c [ 573.567159] Kernel panic - not syncing: hung_task: blocked tasks [ 573.573332] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.123-g520d10d3 #29 [ 573.580689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.590046] ffff8801d84bfcc8 ffffffff81eb9689 ffffffff83c8c080 00000000ffffffff [ 573.598255] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d84bfd88 [ 573.606394] ffffffff81423f75 0000000041b58ab3 ffffffff843bb880 ffffffff81423db6 [ 573.614511] Call Trace: [ 573.617107] [] dump_stack+0xc1/0x128 [ 573.622495] [] panic+0x1bf/0x3bc [ 573.627519] [] ? add_taint.cold.6+0x16/0x16 [ 573.633503] [] ? ___preempt_schedule+0x16/0x18 [ 573.639748] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 573.647028] [] watchdog+0x6c5/0xa20 [ 573.652310] [] ? watchdog+0x11c/0xa20 [ 573.657771] [] kthread+0x26d/0x300 [ 573.662971] [] ? reset_hung_task_detector+0x20/0x20 [ 573.669641] [] ? kthread_park+0xa0/0xa0 [ 573.675269] [] ? __switch_to_asm+0x34/0x70 [ 573.681157] [] ? kthread_park+0xa0/0xa0 [ 573.686787] [] ? kthread_park+0xa0/0xa0 [ 573.692413] [] ret_from_fork+0x5c/0x70 [ 573.698364] Dumping ftrace buffer: [ 573.702009] (ftrace buffer empty) [ 573.705715] Kernel Offset: disabled [ 573.709348] Rebooting in 86400 seconds..