x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x0) mkdir(0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x0, 0x6, 0x8f8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000440)='fuse\x00', 0x5, 0x2) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) close(r3) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) unshare(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xe11) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x8, 0x0) [ 336.588509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54762 sclass=netlink_route_socket pig=13071 comm=syz-executor.5 23:14:43 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r1, @ANYBLOB="2c08007ff687f066", @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400400, 0x0) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x30b) r3 = getegid() write$FUSE_ATTR(r0, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x8, {0x81, 0xe86, 0x0, {0x4, 0x5, 0x2, 0x80000001, 0x1ff, 0x9, 0x7, 0x8, 0x8, 0x4, 0x9, r1, r3, 0x7, 0x5}}}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 336.640747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 [ 336.640982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 23:14:43 executing program 4: unshare(0x20600) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000140)={0x4fb8331dc9a82a43, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000340)) [ 336.641182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 23:14:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/ptmx\x00', 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x990, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1283b05e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2562) ioctl(r3, 0x8912, &(0x7f0000001000)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x5, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000fbff0001000000000000000000000000000000000000000000000000000080010000000000000000000000000000000000000400000000002000000000000000000000000000000000cf0000000000000000000000007fb593c60000000000000000000000000000000092dfc8107ac7b075a58b501b8082b9591fb3342abfaddac885c4e42390a4dc307674d9"], 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0x0, 0x4}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xffffff4b) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000f80)={0x2, 0x80000001, 0x40, 0x3ff, 0x2, 0x5}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000e40)={'teql\xf1^\xfam\fm_l\x03\x00', 0x4000003}) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000fc0)) mount(&(0x7f0000000d40)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x200000, &(0x7f0000000d00)='-%\x00') mount(&(0x7f00000010c0)=ANY=[@ANYBLOB="9071bd7d115ec5d6b03e5d1cbc619457f4a06315da9ae64d5011d03903917246ceee7d4ad80fa5b19c99ff37827c87910000692521a6075545180d97aaf9e041cc084f8ebce4c847e59b247c769655a66a685f511baf14735f0ccd01570a8ee2402099f1ba79bc51ffd36ed228a77ef5fcbbde25cad51ea2d2e5a0cfe11524a20477ab850463f6ee005764fdb7fc9eedc057e6c518c3e5671b325a3c04021e174a4c344b47f69f8a"], 0x0, 0x0, 0x80010, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x104, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}, 0x0, 0x8}, [@mark={0xc, 0x15, {0x0, 0xaf}}]}, 0x104}}, 0x0) mount(&(0x7f0000001040)=ANY=[@ANYBLOB="7ceb385bf8fc00eb3a4ea14fd52defcac3872481a804743ab0dfc83e79ab1f123b065e9a9aea79890043c0d1e7aae12605663ee1a35664c8d41b9b4597a813d133c72d76e7cd22502eecde528fe9c91452c44938ea10e46af165c15b91f2ba69a2976be81f916f09"], 0x0, 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x5012, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) 23:14:44 executing program 0: mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) clock_gettime(0x0, &(0x7f0000004ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/115, 0x73}], 0x1, &(0x7f0000000140)}, 0xa20}, {{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/243, 0xf3}], 0x2, &(0x7f0000000380)=""/146, 0x92}, 0x33b}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000004b80)=""/191, 0xbf}, {&(0x7f00000004c0)=""/73, 0x49}, {&(0x7f0000000800)=""/140, 0x8c}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001940)=""/141, 0x8d}}, {{&(0x7f0000001a00)=@alg, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/217, 0xd9}, {&(0x7f0000001c40)=""/91, 0x5b}, {&(0x7f0000001cc0)=""/94, 0x5e}, {&(0x7f0000001d40)=""/133, 0x85}], 0x5, &(0x7f0000001e80)=""/41, 0x29}, 0x100000000}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/51, 0x33}, {&(0x7f0000002f00)=""/67, 0x43}], 0x3, &(0x7f0000002fc0)=""/152, 0x98}, 0x9}, {{&(0x7f0000003080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000003100)=""/39, 0x27}], 0x1, &(0x7f0000003180)=""/167, 0xa7}, 0x70c}, {{&(0x7f0000003240)=@xdp, 0x80, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=""/89, 0x59}, 0x7fff}, {{&(0x7f0000004380)=@in, 0x80, &(0x7f0000004740)=[{&(0x7f0000004400)=""/62, 0x3e}, {&(0x7f0000004440)=""/167, 0xa7}, {&(0x7f0000004500)=""/234, 0xea}, {&(0x7f0000004600)=""/92, 0x5c}, {&(0x7f0000004680)=""/131, 0x83}], 0x5, &(0x7f00000047c0)=""/240, 0xf0}, 0x5}], 0x8, 0x40000200, &(0x7f0000004b00)={r1, r2+30000000}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000004b40)) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x60000004) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000000) [ 336.641395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 [ 336.643359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 23:14:44 executing program 4: ftruncate(0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000340)=""/189, 0xbd) [ 336.643592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 23:14:44 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$setopts(0x33fc8fce882f33aa, r1, 0x7ee, 0x60) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x100000001) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1d2cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8fbc9f8b139a208e2bb19e249ea1c4add3588bec938c89b3a868e04b0b38cd3148bec4401c69cf919f33c989fce042390c31469da89b49285d465b44b8f831435a5fdac346d2f1e849bab420fa638c63b0ace8c36c13d304eae76ffe2d60", @ANYRES16], 0x0, 0x60}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x20000000000000) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 23:14:44 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0xfde7, 0x0}}], 0x1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x100) preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/224}, {&(0x7f00000003c0)=""/112}, {&(0x7f0000000440)=""/5}, {&(0x7f0000000480)=""/4096}], 0x10000223, 0x2a) [ 336.646182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 23:14:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 336.646452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 [ 336.646671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13081 comm=syz-executor.5 [ 336.653299] input: syz1 as /devices/virtual/input/input14 [ 336.698268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.852915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.917033] binder: 13109:13111 ioctl 54a0 0 returned -22 [ 337.266118] binder: 13132:13135 ioctl 54a0 0 returned -22 23:14:44 executing program 5: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/ptmx\x00', 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x990, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1283b05e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2562) ioctl(r3, 0x8912, &(0x7f0000001000)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6d9d886d3561638b9cbc5bcef29"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000d80)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000fbff0001000000000000000000000000000000000000000000000000000080010000000000000000000000000000000000000000000000000000000000cf0000000000000000000000007fb593c60000000000000000000000000000000092dfc8107ac7b075a58b501b8082b9591faddac885c4706c90a4dc307674d900"/165], 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xffffff4b) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000f80)={0x2, 0x80000001, 0x40, 0x3ff, 0x2, 0x5}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000e40)={'teql\xf1^\xfam\fm_l\x03\x00', 0x4000003}) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000fc0)) mount(&(0x7f0000000d40)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x200000, &(0x7f0000000d00)='-%\x00') r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) mount(&(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000001040)=ANY=[@ANYBLOB="7ceb385bf8fc00eb3a4ea14fd52defcac3872481a804743ab0dfc83e79ab1f123b065e9a9aea79890043c0d1e7aae12605663ee1a35664c8d41b9b4597a813d174639391e95bd0fe2eecde528fe9c91452c44938ea10e46af165c15b91f2ba69a2976be81f916f09"], 0x0, 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x5012, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) 23:14:44 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x10080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x40, 0x3}}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) io_setup(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x501000, 0x0) fstat(0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 23:14:45 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xc80082, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1c}, 0x6f, r1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x5e00000000000000) 23:14:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) read(r0, &(0x7f00000000c0)=""/27, 0x1b) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/84, 0x54}], 0x1, 0x4fbc) 23:14:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000003, &(0x7f0000000300)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e27, @broadcast}, 0xfffffffffffffea4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1}, 0xfffffdd3) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000280)) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0xd, 0x4) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = getuid() r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xc2\xbdM\xbd\x8b\xfb\x8a@\xa3C\xe3\xcaOU\xf8P\xa8\xae\x91\xa2\xa8$\x18\xb1S\x91`B\fQ\xed\x8dQ;\x00\x805W:\xe4\x0e\xc1\x9fi1*P\xf7\xa3\xcc') ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000001400)) r7 = socket$key(0xf, 0x3, 0x2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x7f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80002000}, 0xffffffffffffff97, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES16, @ANYRES16=r4, @ANYRESOCT=0x0, @ANYRESDEC=r5], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r8 = dup3(r5, r7, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000001c0)) r9 = accept4$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x800) r10 = getuid() r11 = socket$key(0xf, 0x3, 0x2) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xc2\xbdM\xbd\x8b\xfb\x8a@\xa3C\xe3\xcaOU\xf8P\xa8\xae\x91\xa2\xa8$\x18\xb1S\x91`B\fQ\xed\x8dQ;\x00\x805W:\xe4\x0e\xc1\x9fi1*P\xf7\xa3\xcc') ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r12) ioctl$sock_inet6_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000380)) r13 = socket$key(0xf, 0x3, 0x2) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40040, 0x0) ioctl$KDSETMODE(r14, 0x4b3a, 0x7f) sendmsg$nl_generic(r14, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80002000}, 0xffffffffffffff97, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r12, @ANYRES16=r14, @ANYRES16=r10, @ANYRESOCT=0x0, @ANYRESDEC=r11], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r15 = dup3(r11, r13, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r15, 0x8905, &(0x7f00000001c0)) getsockopt$inet6_mreq(r15, 0x29, 0x1c, &(0x7f0000000440)={@initdev, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f00000004c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x49, r16}) mmap$perf(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xb, 0x50, r1, 0x0) read(r3, &(0x7f0000001440)=""/184, 0xb8) fcntl$setstatus(r2, 0x4, 0x42800) sendfile(r2, r3, 0x0, 0x80003) 23:14:46 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r2 = accept(r1, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}, [@ldst={0x5, 0x3, 0x2, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 23:14:46 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc6201, 0xa0) prctl$PR_GET_KEEPCAPS(0x7) splice(r1, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x100000000, 0x2) 23:14:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:46 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) open(0x0, 0x0, 0x0) ftruncate(r0, 0x48280) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$VT_WAITACTIVE(r2, 0x5607) open(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioprio_get$pid(0x1, r5) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0x14) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000000)) 23:14:46 executing program 0: r0 = gettid() clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4", @ANYRESHEX], 0x0, 0x9a}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d238f19c044dcd80"], 0x9}}, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x11, &(0x7f0000000040)={0x29, 0x9e, 0x2}) ptrace$cont(0x7, r0, 0x0, 0x0) 23:14:46 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x46a, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r1 = geteuid() setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r3], @ANYRESDEC=r2, @ANYRESHEX, @ANYPTR]) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYRESDEC=r5, @ANYRESHEX, @ANYPTR]) lstat(0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r6 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x40001, 0x20) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000000180)=0x1c6) getgid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[], @ANYRESDEC, @ANYRESHEX, @ANYPTR]) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="b5f6bb9c3f2a41a5cb55084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6241cd31adf9d9e010876d6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde67620b02208401772ca8b6642680c1e7e438dbf26d47a550e3483c017587052a184a7e33429d287559880d251204d36465ae7cfc0e4b62185f9728e9b02fed", @ANYRES64=0x0, @ANYPTR64], 0xfa) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x0, r0}, {0x2, 0x1, r1}, {0x2, 0x0, 0xee01}], {0x4, 0x2}, [{0x8, 0x6, r4}, {}, {0x8, 0x5, 0xee01}, {0x8, 0x4, 0xee00}, {0x8, 0x3}, {}, {}, {}], {0x10, 0x2}}, 0x7c, 0x1) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) creat(0x0, 0x0) gettid() pipe2(0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0xfffffe38) write$P9_RSYMLINK(r7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x660c, 0x3) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x10001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 23:14:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0x4cda454c81899d5e) fallocate(r0, 0x10, 0x0, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x4) ioctl$KDSKBLED(r1, 0x4b65, 0x7) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0xad6716dd6eec578}, 0x10) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20140, 0x80) sendfile(r3, r4, &(0x7f00000001c0), 0x6) sync_file_range(r2, 0x0, 0x20, 0x7) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1f, 0x4, 0x544881, 0x4, 0x6, 0xf7, 0xfffffffffffffbff}}, 0x50) [ 339.778362] binder: 13168:13175 ioctl 54a0 0 returned -22 23:14:47 executing program 1: syz_open_dev$binder(0x0, 0x0, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 23:14:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') r1 = creat(&(0x7f0000000340)='./file1\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = creat(&(0x7f0000000140)='./file1\x00', 0xbb5b406336066110) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x74) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) r8 = openat$cgroup_subtree(r7, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast1}, {0x306, @dev={[], 0x12}}, 0x48, {0x2, 0x4e24, @broadcast}, 'ip6gre0\x00'}) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) r10 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r10, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r10, 0x0, 0x20, 0x7) r11 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r11, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r11, 0x0, 0x20, 0x7) r12 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r12, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r12, 0x0, 0x20, 0x7) r13 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r13, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r13, 0x0, 0x20, 0x7) r14 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r14, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r14, 0x0, 0x20, 0x7) r15 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r15, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r15, 0x0, 0x20, 0x7) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYBLOB="ab9253988e063eadf0e231ca0d13cf097689b74aed05deae8ff7ad8706a96ea51006c978d251239e44f9e3078dbb11b6d45fc2145e15d4946dfd2cd2b15e81", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYRESHEX=r6, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYPTR64, @ANYRES32, @ANYRES32=r1, @ANYRESDEC=r4, @ANYPTR], @ANYRESDEC=0x0, @ANYRES32, @ANYRES16=r9, @ANYRES32=r5, @ANYRESOCT, @ANYRES16=r12], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRESHEX=0x0], @ANYRES64=r11, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR, @ANYRES32, @ANYRES32, @ANYRES16=r13, @ANYRES32=r14, @ANYPTR, @ANYRESOCT=r6, @ANYRES16=r15, @ANYPTR64, @ANYRESHEX=0x0], @ANYRESHEX], @ANYBLOB="00000000be00"/28]) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) socketpair(0x85ca12423a6b16b5, 0x800, 0xd216, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_selinux(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @loopback}, &(0x7f0000000400)=0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) ftruncate(r1, 0x5) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/220, 0xdc}], 0x1, 0x4000) 23:14:47 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$P9_RLERRORu(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, 0x0, 0x4}, 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0xc020660b, &(0x7f0000000000)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) 23:14:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x10020000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = dup2(r1, r1) write$cgroup_type(r3, &(0x7f00000001c0)='\x00\x00\b\x00', 0x9) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x5, 0x4) 23:14:48 executing program 1: syz_open_dev$binder(0x0, 0x0, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 23:14:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/tcp\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") fcntl$setlease(r0, 0x400, 0x2) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mremap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) preadv(r2, &(0x7f0000000040), 0x10d5, 0xfffffffffffffffd) 23:14:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800100001a000108000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000ff7fde515110b646a45a42441950cad60000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006374722863616d656c6c69612900"/312], 0x180}}, 0x0) [ 341.168093] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. 23:14:48 executing program 3: socket$inet6(0xa, 0x80000, 0xfffefffffffffffe) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x24001000, 0x0, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000100)={0x5, 0x9}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0xff, 0xffffffffffffffff, 0x8, 0x1, 0x20000000, 0x5, 0x3ff, 0xfffffffffffffffc}, &(0x7f0000000200), 0x0) shutdown(r3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00'}) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000480)={@broadcast, @local}, 0xc) write(r1, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3b) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$peek(0xffffffffffffffff, r5, &(0x7f0000000180)) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @local}, {0x6, @dev={[], 0x2b}}, 0x4, {0x2, 0x4e23, @local}, 'bcsh0\x00'}) 23:14:48 executing program 3: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002000006008, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x568, 0x0, 0x180, 0xc0, 0x0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff, 0xff, 'ip6gre0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0xc, 0x2, 0x10}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x18e, 0x2}}}, {{@ip={@local, @loopback, 0xffffffff, 0xffffffff, 'hsr0\x00', 'bond_slave_1\x00', {0x1fe}, {0xff}, 0x62, 0x3, 0x2f}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x5, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x2c8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={0x230, 'bpf\x00', 0x0, {0x22, [{0x10001, 0x0, 0x10001, 0xef}, {0x1, 0xb, 0x7, 0xff}, {0x2, 0x5, 0x3f, 0xa0}, {0xffffffffffffffc0, 0xffff, 0x424, 0x9bd9}, {0xfffffffffffffff8, 0x4, 0x0, 0x7}, {0x4, 0x3ff, 0xc68f, 0x8}, {0x0, 0x400, 0x7}, {0x9, 0x2, 0x9, 0x2}, {0x5, 0x1, 0xc02}, {0x3f, 0x1, 0xff, 0x7}, {0x20, 0x8, 0x0, 0xfffffffffffffffb}, {0x4, 0x4, 0xfffffffffffffffc, 0x3}, {0x8, 0x3, 0x200, 0xfffffffffffffff8}, {0x4, 0x5, 0xffff, 0x2e}, {0xfffffffffffffff8, 0x80000001, 0x8001, 0x61}, {0x2, 0x4, 0x1}, {0x7fff, 0x65bd, 0x9, 0x4e5}, {0x2, 0x4, 0x1da, 0x8}, {0x7, 0x2, 0x80000000, 0x9}, {0x9, 0x1, 0xfffffffffffffbff, 0xa00000000000}, {0x0, 0x3a, 0x3, 0x1000}, {0x0, 0x6, 0x3ff, 0x3}, {0x800000, 0x5, 0x9, 0x7}, {0x3, 0x8, 0xffffffffffffffff, 0x6}, {0x7, 0x639, 0x1, 0xb29}, {0xffffffffffffffc1, 0x7f, 0x400}, {0x6b40000000, 0xffffffff, 0x4, 0xd53}, {0x9, 0x9, 0xff, 0x40}, {0x3ff, 0x7, 0x8, 0x3}, {0x100000001, 0x7, 0x80000001, 0x100000001}, {0x8, 0x1000, 0xfffffffffffffffd, 0x3}, {0xfffffffffffffff7, 0x8074, 0x80000001, 0x3}, {0x1b, 0xf0c5, 0x7, 0xfffffffffffffd20}, {0x0, 0x2000000040, 0x6}, {0x100, 0x6, 0xff, 0x80000000}, {0x8798, 0x7, 0x4, 0x4}, {0x6, 0x0, 0x2, 0xffff}, {0xd41, 0x9, 0x6, 0x7fffffff}, {0x8, 0x800, 0x0, 0xffffffffffffff81}, {0x0, 0x8, 0x101, 0xfffffffffffffffc}, {0x7, 0x51, 0x5, 0x20}, {0xe5, 0xfffffffffffffff9, 0x6, 0x5}, {0x6, 0x4, 0xeb, 0x4}, {0x3, 0x6, 0xd581, 0x37}, {0x7, 0x0, 0x7, 0xebe}, {0x8, 0x4, 0x1f, 0xc89}, {0x6, 0x5, 0x1000, 0x10001}, {0x6, 0x100000000, 0x5}, {0x1ff, 0x80000001, 0x6, 0x2}, {0x800, 0x3, 0x0, 0x6}, {0x9399, 0x60a3, 0x1, 0x5}, {0x7, 0x0, 0x3ff, 0x3}, {0xffffffffffff7fff, 0x5, 0x3ff, 0x7}, {0x10001, 0x8001, 0x40, 0x3}, {0x7f, 0x8, 0x80000001, 0x1}, {0x9, 0x5, 0xff, 0x9}, {0x5, 0x8, 0x8, 0xd5}, {0x0, 0x80, 0x4}, {0x4, 0x400, 0x1, 0x8}, {0x7, 0x5, 0x253874a4, 0x6}, {0x7f, 0x9, 0x7f, 0x9}, {0x6, 0xff, 0x8, 0x40}, {0xf0f0, 0x2, 0x6, 0x80}, {0x8, 0xff, 0x5c7a9f21, 0x2}], 0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x101, @multicast1, 0x4e21}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0x0, 'ip_vti0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x2, 0x4, 0x48}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xffffffff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x778) 23:14:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x2a0883) ioctl$FITRIM(r0, 0xc0185879, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '\x00'}, &(0x7f0000000080)='/dev/snd/timer\x00', 0xf, 0x2cfbb39f8bfeb320) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x00\x00\x00\x00\x00f') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0x7) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) 23:14:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5406, 0x71dffe) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x6a, 0x1, 0x8001, 0x9, 0x9, 0x9}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x80000001) 23:14:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0)='./file0/../file0/file0\x00') umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x4) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 23:14:49 executing program 1: syz_open_dev$binder(0x0, 0x0, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) r6 = openat$cgroup_ro(r3, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 23:14:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388", @ANYRES16=0x0, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f3384960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad03000000dfdaf3d0fef215586de3c101e4f8d1b12b1894e2983d0cfcdfbb1118c5d7107ff23ef7779ecc90167eea3e93f919549f3a4042e938b496824a39c0fcc0936f1061a5053e356ed973afa10a87", @ANYRESHEX], 0x0, 0x16a}, 0x20) tkill(r0, 0x39) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTAT(r1, &(0x7f0000000200)={0x86, 0x7d, 0x2, {0x0, 0x7f, 0x6fb, 0x4, {0x80, 0x1, 0x2}, 0x40000000, 0x1, 0x6, 0x8000, 0xe, 'keyring%system', 0x19, 'cpusetwlan0nodevprocwlan0', 0x24, 'eth1eth1trusted$self@-trusted-eth1!}', 0x1, '\\'}}, 0x86) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:14:49 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) getuid() r1 = inotify_init() fsetxattr$security_smack_entry(r1, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/dev/loop#\x00', 0xb, 0x2) waitid(0x1, r0, &(0x7f0000000200), 0x80000000, &(0x7f0000000280)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x125f, 0x0) 23:14:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x44001, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000004b00)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x9) 23:14:49 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x81fe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) 23:14:49 executing program 3: r0 = socket(0x46004b7fc53b6c80, 0x5, 0x8) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000100020423ca0000cf", 0x1f) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x121) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000100)=0x4) 23:14:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000004c0)="11dca50d5e0bcfe47bf070") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r7, r5, r6) r8 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r11, r9, r10) r12 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r15 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r15, r13, r14) r16 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r19 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r19, r17, r18) r20 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r23 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x32000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fchown(r23, r21, r22) getgroups(0x8, &(0x7f0000000100)=[r6, r10, r14, 0xee00, 0xffffffffffffffff, 0xee01, r18, r22]) r25 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r25, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r25, 0x0, 0x20, 0x7) r26 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r26, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r26, 0x0, 0x20, 0x7) r27 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r27, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r27, 0x0, 0x20, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r29 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r29, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r29, 0x0, 0x20, 0x7) fstat(r29, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r34 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r34, r32, r33) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) r36 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r36, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r36, 0x0, 0x20, 0x7) getsockopt$inet_IP_IPSEC_POLICY(r36, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) r38 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r41 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r41, r39, r40) r42 = fcntl$getown(0xffffffffffffffff, 0x9) r43 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r43, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) fstat(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2080300}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000500)={0x2bc, 0x42, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@generic="f03a3c00f8ac05003e0916edf4838cd35fd6fca55f9179251fed33e764610e1319beada620e21bde9426b2154a293aad2a06f759a0c8d8872017b6514b73da32a4762b2ebb5c225e350c0614c4107451f09e02ac21e41f631d7cd9d91eee95eb562b5c5c47e78245e9dc3c263243cc5015c7cabc1b2686474f45eede37923284d000f537f73f89e3e41fab861b8226add59c0e2c55de2f4ff7cb982e7ca87d40aa401f60064ed9f24c6013b89c6c", @generic="f73b72b2a1ab7a", @nested={0x1cc, 0x2c, [@typed={0x8, 0x22, @ipv4=@rand_addr=0x1}, @generic="1a71daf243e2a1e5169dc3e9ec28f66a224bc7887fac40ba79cd7c22d42dbd87c2b7957302048a9d7d870652cdb8c248bdece50a911c51055419a531663cc6d0c9b17ab111f9ad60e87452fe545fd448faada310117b77802f6ddba000", @typed={0x80, 0x6d, @binary="89c33fdfdc995ba0cf5d087f73a24ee439d52d00d892abad8ef2c5386073adeac104e312d71df28ce75ebd75da18d49de647f45e6227f017769b2b892b0ef7107aefbee9d4369d6c86b509eb1fe13d077eebf3ca99d50ad75dc22dcfbad4a012e1f945776070be954460d31bff1e5d91cdbad69a8d73761309c3c5e5"}, @typed={0x4, 0x15}, @generic="015338040aa5d46a003897f307401b79678e86da663fd47fefaddffd9c95aa8ba6ce47356b02a8851fbe1580f63c719f777fab1059383f01b1c54e4575c1a96df4293b23ff34cefae0dcba330fc33285d7b00c90ccdfbfb61dcb13a94f64a59c3627cc99beabec8055af33988d5be57e156ff7cbab807b6b314f202aed235ba5f05307c6197a00c812bf44aa6343304752ee522292892139cdd906d9d1b5c47ce648c533d384e66664758bfd3ddfc0cec31e83ed31934b8c68d67a40bc17c98ce554c4d939fd07d48f86c25c56b523d7007cc55286b433ada750edf80a17de"]}, @typed={0x20, 0x2e, @binary="2997c48d3a6f1d7ec1b1ea7488ee2901bd1dd25c525030f608b2"}, @typed={0x8, 0x26, @u32=0xab3f}]}, 0x2bc}, {&(0x7f0000000240)={0x10c, 0x23, 0x8, 0x70bd27, 0x25dfdbfd, "", [@nested={0xfc, 0x0, [@generic="4f293ce4d806175174b2b35271c8f0665928688478a4b9a438d60eca88969b5f90e3179fe7500cfbda24b621c971c3c13e98e018c8b1af5c6ed66d7ea69dbbd9236dfdc2afb14478fc9d3f5e0ca7eda4b9cfa8f5dda543", @typed={0x8, 0x6f, @pid=r1}, @generic="931b845fcaceb3f9e6955fb305caef413ee1260038e116899a34e7443e7e644244efa7c86680694c44afa07c630a56382f79986cdbcea10aa63743aa790b7283d8064561c55842729e399b75d99dd85137565f9d67d75c6657e76c4207480f8bd0d5cda4a52bc81cdd780fae486cfa0231ff66266067e07c3b4e6a12cb3e4799e166749a473d1bc661bcc452a408cfa99719301dc3d789"]}]}, 0x10c}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r24}}}, @rights={{0x14, 0x1, 0x1, [r25]}}, @rights={{0x1c, 0x1, 0x1, [r26, r0, r27]}}, @cred={{0x1c, 0x1, 0x2, {r28, r30, r33}}}, @cred={{0x1c, 0x1, 0x2, {r35, r37, r40}}}, @cred={{0x1c, 0x1, 0x2, {r42, r43, r44}}}], 0xb8, 0x40000}, 0x10) r45 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r45, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781200000006c46f0006000000070000003c9f0300000000000000c20800000000000000000f00000067680000000000008f454c943bed8275df502379b63a86249c20bd63b12d1c4b3ecddbd9ec791609a74643ee69d43d74bb3c3fc5fc2f84095b64b3299addf3122ffb5850f448dff99e379019cbdb0353ca1d91e75cd5295700d24e53b0f62c63197ec63435a37918b73ae6b65fb6381e75965072da89ec7b4d7b7599f1a57b"], 0x40) 23:14:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0xfffffffffffffe37) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:14:49 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20480000) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) accept4$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c, 0x40800) r4 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400080", @ANYRES16=r4, @ANYBLOB="010627bd7000fbdbdf250100000008000300000000001400010000000000000000000000ffffe000000108000600010000000800020006000000"], 0x40}}, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x23c2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x401]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x10}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40804}, 0x810) 23:14:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x2187a1c4b69f7696) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x356) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000640)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 23:14:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93caef19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b3"], 0x0, 0xcb}, 0x20) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:14:50 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:50 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0xfffffffffffffef6, &(0x7f0000000000)="3f006671d7af52f647750500080089ea01000000002229000008f79b2a4597db28", 0x0}, 0x28) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4}}, &(0x7f0000000200)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r10 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r10, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r10, 0x0, 0x20, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000002a40)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000002b40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b80)={0x0, @rand_addr, @broadcast}, &(0x7f0000002bc0)=0xc) r13 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r13, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r13, 0x0, 0x20, 0x7) getsockopt$inet6_mreq(r13, 0x29, 0x15, &(0x7f0000002c00)={@local, 0x0}, &(0x7f0000002c40)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x11, 0x800000003, 0x0) bind(r16, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r15, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r17}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003280)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000032c0)={0x0, @rand_addr, @remote}, &(0x7f0000003300)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket(0x11, 0x800000003, 0x0) bind(r21, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r20, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r22}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003340)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000003440)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000034c0)={0x11, 0x0, 0x0}, &(0x7f0000003500)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003540)={'veth1_to_hsr\x00', 0x0}) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x11, 0x800000003, 0x0) bind(r27, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r26, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xc4, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_VF_PORTS={0x9c, 0x18, [{0x68, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f059fde5d0f099b148c0532682a3d549"}, @IFLA_PORT_PROFILE={0x10, 0x2, 'queue_id\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8e56cb7d2fed25607ce6876e65bfe8a2"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ppp0\x00'}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x200}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x8, 0x2, '\x00'}]}, {0x18, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7c629cd4088c0f7d8bed34707ca411a0"}]}, {0xc, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0xc, 0x1, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x2}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x4080000000000}]}, 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003580)={'veth0_to_bond\x00', 0x0}) r30 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r30, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r30, 0x0, 0x20, 0x7) getsockopt$inet6_mreq(r30, 0x29, 0x14, &(0x7f0000003640)={@mcast2, 0x0}, &(0x7f0000003680)=0x14) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket(0x11, 0x800000003, 0x0) bind(r33, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r33, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r32, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r34}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket(0x11, 0x800000003, 0x0) bind(r36, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r36, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r35, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r37}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000036c0)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) r39 = socket$nl_route(0x10, 0x3, 0x0) r40 = socket(0x11, 0x800000003, 0x0) bind(r40, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r40, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r39, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r41}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r42 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r42, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r42, 0x0, 0x20, 0x7) getsockopt$inet_IP_IPSEC_POLICY(r42, 0x0, 0x10, &(0x7f0000003800)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6}}, &(0x7f0000003900)=0xe8) r44 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r44, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r44, 0x0, 0x20, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r44, 0x29, 0x23, &(0x7f0000003980)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000003a80)=0xe8) getsockname(r0, &(0x7f0000003ac0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003b40)=0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004280)={&(0x7f0000000080), 0xc, &(0x7f0000004240)={&(0x7f0000003b80)={0x684, r2, 0x101, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r11}, {0x1e0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x0, 0x3, 0x5e1, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x679}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r19}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xb8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r28}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r29}}}]}}, {{0x8, 0x1, r31}, {0x264, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x32af}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r37}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r41}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r43}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r45}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r46}}}]}}]}, 0x684}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) [ 343.064102] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 343.110336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.133551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.292958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.325920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.422166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.529952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.547859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.566711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.177438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.192924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:14:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2b9, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="d3d0b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYRES32, @ANYBLOB="e6c55c5d9ee45101ed000029a741efca44f937d0495354364fff4107a38fcb2482ba"], 0x0, 0x59}, 0x20) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 23:14:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{r0, r1/1000+10000}, 0x12, 0x9, 0xffffffff}, {{}, 0x0, 0x92, 0xd2}], 0x30) getrandom(&(0x7f0000000040)=""/56, 0x128, 0x6) 23:14:52 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x7ffffdff, 0x4) 23:14:52 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x6, 0x4) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002000006008, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000180)={0x2, {{0xa, 0x4e23, 0x4, @rand_addr="ffc7cae49c0c14bdf395cf9a38f35900", 0x9}}, {{0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, [], 0x26}, 0x20}}}, 0x108) 23:14:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) fcntl$setpipe(r0, 0x407, 0x2) r1 = open$dir(&(0x7f0000000080)='./file1\x00', 0x81fe, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000055, 0x0, 0x0, [{}]}) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:14:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) open(0x0, 0x400, 0x50) rt_sigreturn() sendto$inet(r0, 0x0, 0x0, 0x900814fac1e6bd72, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='$\x00', &(0x7f0000000200)='bbr\x00', &(0x7f0000000240)='\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='bbr\x00', &(0x7f0000000400)='bbr\x00', &(0x7f0000000440)='bbr\x00', &(0x7f0000000480)='\x00'], 0x400) futex(&(0x7f0000000340), 0x4, 0x0, &(0x7f0000000380)={0x77359400}, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 23:14:52 executing program 0: seccomp(0x1, 0x1, &(0x7f0000028ff0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) write$P9_RREAD(r0, &(0x7f0000000280)={0x81, 0x75, 0x1, {0xa3, "a840f13401c96b3e43ea07b2d42a910773164e9eb15e7dd2adf6c80ccb6ace2bac73b45802672f062d58943553a368f0a75cd7fe961732f8125dc0019cd436430939724d03382e76a5ac3e2adc70ac1171fe033a87f9b2fa86cc892839c2feb6ac7b532255f158ac03acaf547cb6a7955d61682b0fff842c33a5fa746df77bee629490c1a45ae32d7ec8030f41ba69d0695ba686265676b5ba32a5f0308ac390389820"}}, 0xae) seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) seccomp(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xffffffffffffffff}]}) 23:14:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002f0000007500000000000000950000000000000025fede660a6c1c6ec3020d15b97b31f134402e143878fa453618cfb6dccc701618bc9915642cf6741c5b0104000000000000b52287f8"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x189}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r3 = openat(r2, &(0x7f00000003c0)='.\x00', 0x400000, 0x35) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x802, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000400)=0xff) sync_file_range(r2, 0x0, 0x20, 0x7) read$FUSE(r2, &(0x7f00000005c0), 0x1000) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$P9_RFSYNC(r5, &(0x7f0000000480)={0x7, 0x33, 0x1}, 0x7) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x13, r4, 0x0) 23:14:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0}, 0x109) r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x1d, 0x7) recvmsg(r1, &(0x7f00000004c0)={0x0, 0xffffffffffffff57, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/190, 0x2e5}], 0x342, 0x0, 0xfffffffffffffc4c}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=@random={'user.', 'deth0ppp0vboxnet1#\xae\x00'}) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) futimesat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000500)=""/227, &(0x7f0000000040)=0xe3) sendto$inet(r0, &(0x7f00000000c0)="edd008000000000019a65155921e11879a2d3d176c9cc2ad000012ac6a462e2ae6d0e5dafb34c31fa76fa9d500", 0x2d, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="dde20f100fc1c79a93edf7e95fd2a3ceb954bf7b28df4f7b", 0x18, 0x0, 0x0, 0xffffffffffffff04) 23:14:53 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:53 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x100800) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) dup(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) clone(0x2008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='logon\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0xfffffffffffffffd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x20) 23:14:55 executing program 2: socket(0x18, 0x0, 0x3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x20040800, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) getgroups(0x9, &(0x7f00000001c0)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01, 0xee01, 0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x80000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303134303030102c757365725f69643d", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',allow_other,max_read=0x0000000000000006,blksize=0x0000000000001000,allow_other,max_read=0x0000000000000008,allow_other,blksize=0x0000000000000400,default_permissions,max_read=0x0000000000000101,default_permissions,appraise,smackfsfloor=cgroup,subj_role=GPL*wlan0GPLeth1\x00,obj_user=$+ppp0},\x00']) clock_gettime(0x7, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200), 0x0) write(r0, &(0x7f0000000340), 0x41395527) 23:14:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x0, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x0, 0x8001, 0xffffffffffffffff, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x0, 0x200, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000300), 0x9950d5e44c8d347d}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x502}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000580)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x7}, 0x28, 0x64c1fa1689873079) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000780)={0x3, 0x3, 0x8000}, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000002c0)=0xc89f057ff956f3ce, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r1, 0x0, 0x4040090) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) keyctl$session_to_parent(0x12) 23:14:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd\x00') getdents64(r0, &(0x7f0000000400)=""/163, 0xa3) 23:14:55 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$P9_RREAD(r0, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64, @ANYRESOCT=r1, @ANYPTR, @ANYRES16=r0, @ANYPTR, @ANYRES32=r2, @ANYPTR, @ANYBLOB="af935c5b1cd724a8fb3f06f8064f466a3d59a290c248040512d561988abc6253b3b70a3fe9ad474decc2866d48fa785fdab089f66d0db442eb62d102c1365244996fd53e4d8f733aad1792d414a72fd35e5ca3df96d44132ad720a81f4c6717d3940338a66a642f42a0350d2a1263c162ae3f76329519e1e156c15845efc05ed21227f45cb644342fe2414179b"], @ANYRESDEC], @ANYRESHEX=r0, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRESDEC=r5, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES32=r4, @ANYRESDEC]], 0x13ee) sync_file_range(r0, 0x0, 0x20, 0x7) write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x6}, 0xb) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) creat(&(0x7f0000000200)='./file0\x00', 0x48) 23:14:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r2, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) write$binfmt_aout(r3, &(0x7f00000001c0)={{0xcc, 0x1, 0x4, 0x2ca, 0x3ab, 0x8, 0xb4, 0xffffffffffffffff}, "7ad1ab3f5ff36f050298215113db268ae29b37846619570ebe514bd403bf23d9505457d786b44d5f3777f3f7da62d915dfd75d6d8ecfdcf1509008ba3287b1ae7c1f5d3247b725b7964064a6af6a33fb17ab642491fcd34ad0eef04f3164bf5b2fcf15617f0e21c256023cc87a1d349f94da773cd0ef1c704f6c05a0753ad2f77d2c854c0abc5100ce762ed33f05851b84c53cc05f94c491e6026b47a949935926dd8bd31719f85d265d01bd10e8634c9d9e2fbcbf98047049d9225dff57d1", [[], [], []]}, 0x3df) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) [ 348.033820] binder: 13406:13412 ioctl 54a0 0 returned -22 23:14:55 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0xffffffffffffff33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) wait4(r3, &(0x7f0000000180), 0x1f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c", 0x44}], 0x4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x8, 0x40000) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000001c0)=""/139) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:14:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003740), 0x400031b, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x10001, 0x14a}, 0x10) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fab460a44d285d3dc90eac71f8a0a8ac84c17b3fc9b9a8e3b29769c11217e91a8be7a3eba0fe2f8a3e58a163a6c4aba256c9ad6c26b78ea962371db1cfb710f4dc6fee6c11afd4db966e5fa9a7dfbf31286d063f6c169e2219fac15ba0d30be44cc97f5a638ade3653ac896bb04c36f5df7feda779953076e347fb5bd351c0352026fce530cd0d7ef6666615eaf01dd58463d814e54b6a5f3bea24c94fab94a7044d06eec347cc3e43"], 0xc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="d6a241c1505ce7aca56db4b51e820c909d3319f04bf1e721f254f28790a0874bb23d80358eecedf71a6b6d06123ceac45e205dc00765c63fc8a15c2128a24b0bf4c4184ec17ead9de423855f3a1ed9be1d4063", @ANYRES32], 0x0, 0x7b, 0x0, 0x20000000}, 0x20) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000240)="311dff3fcab6800c43f6f624bb4693c8088ce08f02b274f2723e2ac84d865e37d56f4e3232407884a3d6dfb66d603fb12cdb0c1ed6866fe3a138db3f7fabb03e65b511d9a14c711db67709bcfc6f1f909e1f478f105a4459180c6f6f7e5a265290da042aa026b9bcf7f04ccaf58e85b1d98d6c122821c0b6dc89d8dff5fa7b05c89d39a65db29777228f1c8dc57152af18a4ba779e0552571c92f1751d0c12145cbcb0dc247f17d0b40b41c21b60") ptrace$cont(0x7, r3, 0x0, 0x0) unshare(0x60000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x1, 0x4) prctl$PR_GET_SECUREBITS(0x1b) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040002, 0x0, 0x0) open(0x0, 0x14103f, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$P9_RREAD(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=r5, @ANYRES16, @ANYRES64=r1], 0x3a) sync_file_range(r4, 0x0, 0x20, 0x7) r6 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000300)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0xfffffffffffff53b) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') 23:14:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x5, 0x1, 0x200, 0x200, 0x1}, 0xc) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:14:55 executing program 0: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000000040)="1f00000013000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) 23:14:55 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r1, 0x6, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x16}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14f1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r1, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syslog(0x2, 0xffffffffffffffff, 0x1000000ad) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) getsockname$packet(r4, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x244c2c2b, @ipv4={[], [], @loopback}, 0xffffffffffffff81}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="694ec80cbc14e8e194b88381ea6507e32fbd7fa948a5528bf89df811e44fc50f9cea46eeab2e475de07f60e2b5471a71c36feddd5f94d3dae6bd24bddf2a4f535e16a33571c20561f7fdeefdcaae0fdbe06b", 0x52}, {&(0x7f00000000c0)="1df81ae37a8c0abe9693b9a421454b950eed0cd56f5b4e503dd279a072e143832a3ed6f9f7ce335be287355e472e7e5ba4f7c79cbde8095efc2fe00db1c27072aedbd5a4101d89da46546e1398ca97cbb8ca2865c1257ac496d252aabcb63bd52cb7f8b35fda8ef55cd42332f68d584e2521f547a6c428781935c9d6ae46dbb9c25c3449f563ac7073d2941d159c489f90e0ee05ef35c3e3f7d5f5f1ffe8915118ba1f702cb62b437871d91f1d518ea548afa2c16ee866993a46b78e18f2bebc63208d400d7bae6202ed6214aba933a92de459", 0xd3}, {&(0x7f00000001c0)="5dce8a50bd04883f1f740e121693972c45ee8de79d0472f507f9ca37cfb306a342", 0x21}, {&(0x7f0000000200)="66b8bc69a444f99991667825d8a868ff02bbc683d7e1997de2ab38123a51620644cbed8ac67e167f7817e83cb204862b8becf93aa9b11df5313f80a3237b0ca851c41f1d6fa283c667a18e6fac0f2d9f5a0d53cdb294200f6949cdd314ee21c37e685abf0f8b03acd3b0926b27aee208b5ee1b79d1504cbdfb9bd6a4181fa04cbaf1d855e5facd693ad79171fb8bd4f9d66660f7193646ef1133eab22aa628caa7027e6b17b072", 0xa7}, {&(0x7f00000002c0)="a7382f1e1b3aff2b8de1d3e183f33d0f58", 0x11}], 0x5, &(0x7f0000000440)=[@hoplimit={{0x14, 0x29, 0x34, 0x20}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="581360db552a881604f5ebfc22c8f46384a4852b010cecf2a2195298522035c661498ca8762801e21b06aa8223e4e6ce733e0c10b581c926b82ddb2d4aeaf90f3eb04c2ebf3b70cc7c34247580a449f68a1771a32f11db35f4c6735ff878cbf2fa1ff7effadad69a3d84f8dcef643d834ecb5f066868548f31a8e5bd64908b3a5a1f097fc51414a0cf8c3af3e4d6d891aa82da689faea5551e790f81420be1bb64815ca828cf5efcfb8e23b6f26a0afffba7d6aa021f56b089f19505f8c09bd0f8bbb4068728d069c8121c932150738d70fb96de3fcd1636d07b9a92d93622fdc6f16de5bbe2c8", 0xe7}], 0x1, &(0x7f0000000b40)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}, r5}}}, @rthdrdstopts={{0x48a, 0x29, 0x37, {0xcd, 0x32, [], [@generic={0x5}, @ra={0x5, 0x2, 0xd4}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0xc22}, @hao={0xc9, 0x10, @rand_addr="b9d16c3271596f2022fd472c712e1df3"}, @generic={0x68, 0xb7, "60268225f95ababb9789bfafeb68b54cc0a23879861ce875f8c5ee45a2a7ece19eb59e592a7ca352bcc5e84479f559adbe44aa9ac999008c6f0c38024d720f2f5d1ec734e3cbd358ddf7987578f7963333b05b413206cf62c1c43e1d3fda8bf7f32159a0833717a489874a7d0454cf7e153b6051b925fc6849d2186a816974e368e2f755778c533551580c97c7d6652392500abc65db7308cda35da3f665ab5d75501c106fad09728ae4ac9afe52993fa74668ca7f1974"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfffffffffffffffd, 0xb0, "72da8f7b4ba63cb19cb330ba2c81b2354d5c2a74f97ed8f4d8aa7a19d6988027dac0d4691e4221e8aa3fcb01378d908486af1e10eb0bb9bdf4eb3086b1fe8200335898cfac94a121a09ce1dee7385555d5c8eec96fcee4171330e9fe4e02f29a39ea835c1fb79066f9fe98074c470885da399f738b3dd2275b1a5d46402acb86a231f36f0a17c18399e1bafcbf0d5387ffcab04e29626459637cf0f5743b6fb5b1f8e9410a388253acfa362984a133a5"}]}}}], 0x1d8}}, {{&(0x7f0000000d40)={0xa, 0x4e22, 0x40, @ipv4={[], [], @empty}, 0x88}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000d80)="f2a608ae37b0244ce6c6794ad34a710c4f558928bbfd7c81abf479a00eaa53bcf2080407ccb7d60c4fb65e86efde0c613149c69c0a23e8ab67acbf9330bb726db8e7139cb6dfc3a27cce3d5670b1a015311e9560bde4604830b2b8a7928caf4b87b31362557adae5998b5efd43ec272748bd0df9bec98f6b468b4934d46164c6e350fc770e68780faf96345d1239f9f4a8e1422a", 0x94}, {&(0x7f0000000e40)="b6cfdfb77c1361108b75b875042b1be619782b2c7d94ddec084f6b48fb302c5ca90598b4897e683e72f8f8d14fe72f106ba66ad9e82495766e7a0925c30a08e5faed19126759abc1fc11ee2b7f062a80314842f29cdd156540e944f1472e20d2f08ef92040484b36900b10856da0b65b84802a2a83c662c0c1b2badbeb790b0801447e3bf1426a7da5bcaa97bb2f8b603d45ea12b9", 0x95}, {&(0x7f0000000f00)="47dd4ba9883ee35b5f949a3463dabe5c229d919a80c1068c317d801640fca59fdb50b03c8a29091515fb8865052cd6d432663cdafa3c30ec2deb8e55ae0c3dea259ba3c3830f5fec65ca46265d50dd2bce6db0878c12325b20733370378196301438bedf78c2b5a42aac62c6ee8a94ec2f42040bb623851b898f795ad152abe23866368ddf236e3ccfc4b8f72eb4216e708efe8a58e63ce5199df0c83b3a7ceb3fa6", 0xa2}, {&(0x7f0000000fc0)="fb7bd1320c434cb7cf5deacc4443f8ee33d9edfc0e1d0211b65c9d5c36fb71889ebebbe62a46dbf9e8251eeb1b23e364d26cf3fa4ca85667817316bd333d04f478b877de1d62e52743d4b648c17d6b2915dc6f6264c06f31667ed93356b594d9c6680eb3ea40203b3e1ccd48dffafe260972ac6b3b5bed25ecac85c20d4098504fd67a7f5ab4d569d160399281585e743b4d56fbdb74d3394f9de22488ef6596", 0xa0}, {&(0x7f0000001080)="9822652f63595ff9dc2da0ab903ae56c3c1b28cc153b5c3f5c17344d92b0fbdec3cd33c7a1f3f304e9fc4c5a9658865820f8eab837a02aaa1e4dd765c89a84cd4b3b4720ec5d01f669eb7a99e359fe53d65a23b53a1adc48b62e9cf7482276a82ca5e7259d9c9f43ce8fa2c79f08748b80c840a05ef1c85192ad866dff31c890bcdbc5991572c6e71315ac009da384d7331157c46fd7d52d6d57631e14912e16f8920132d4d0bfe50eb5048ceb2488231e", 0xb1}], 0x5}}, {{&(0x7f00000011c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x27}, 0x644}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001200)="fe50a45db68cd1422d47dc623b655c9b3570233d91d392ae3906aa5bfbaa85389ccb9222ec4c5d44d87f444f9a7a176616a3cd439fce1fab942258f7f783341eaafdfca7d728d728ea74954500d7508ca6d4987edceeb2b50f993d2c5b44e473c34792cf559a38d7849f6e9c53a95eefe50d755d105b28d2a2f987b2b8da91f62d2a4827910daefda84246631d1c8180051846aab667b6280a7b7e971b60161ea634cdb47c8c6e1b8a54ac9e37e38f2f2af2ddf89397b83c91844c521f353596ecc155fe4e49a28c230be0539ceb098578914546bc6be1bc05507748", 0xdc}, {&(0x7f0000001300)="3c6c51bbfe8c5f46a58866f5bb306195ae1967a78687744ad6734f20f7e47a7e88de257a84b1e6930ad258bf2dc39dd1d6c5246f8f78da6f3514993ad6aee4bbc31da887e070ced88726f17e88795d8fac7b7181dae469b7865ab4", 0x5b}, {&(0x7f0000001380)="5be949cd947c01995462f972fd300ce237a46f5dc6ca4486d227fe315c2101805bc47578535a5b8c1c870204e513bc86101a4d4524802450adf8ad13d1f56977c77d973f83ef99e5ffc0beca5caa1fd41d09f4508d24255432b93f378eaf837f46e897bb6157a3c2ebb448d9055942644f27b7129a38b7b0c9e7047311adcd96229cc7cf549cfc456afd81d71651988e675622f4eeb7bfe9c8e386e5225eb6aebfa1449f54dafc7559632ade7bf8a3ed9b0df8", 0xb3}, {&(0x7f0000001440)="8a8e2e27e6aefcf276847101f39fe2b83a340ee149073cdfddd2aa1494fba50d8d995de630ad5630f23e1a6241ae9a52dce6dbf883c743af3369af169093dd8e9695755bc3acaf159cd170a7986936b4b22ccbaa2db9558b4c232b84b326f50f67231b88fdfdb8968702bf13a3c0012481d1571454450ebe5c66ddf7f9e69c90ec2e1ecac009af410f660b48b618d8466d71adf2d1", 0x95}], 0x4}}, {{&(0x7f0000001540)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001580)="34fc4d2c5aa3b3cdd3af5acfd38f6b54e0339174a0c3e11632b58648c2ebfea4698e51e8a06ba4e1ad0077f41181d444b1ac576d3ca07a5ec80a721f5e834c3d1549cd98c68bc92c857cd22f", 0x4c}, {&(0x7f0000001600)="e6ff91642b816da65d13140404bab42ca6c01117fc49b13b5a9a295914a02be67dda4cd2ec4b73cd548eff120841005550a35bd73ce90a3c8da9ccde48a0dad2f3e10f48c898fdd43e8c631bc4ec82e24fdb1af5dc1be32aa26a45fd", 0x5c}, {&(0x7f0000001680)="0011bc3c2676a11e7cda4c6fc6a2b362d8a07ac04eb7265a56bce55925d395d8c72f919c5b418d29ed80e46d4022a014a26d7c01bb06a6f1b28737ba6cf5b8c4289ab22ad629344c861cfed5ebced8fb27b70f60e3cafe1d52112f36da4677997abc91bbcf742a8cffd5ce540a1e454ce2c6af6c501977a4a9f5d2b8c6a095080f7fc9ba3b4a95b33d9a4b25c8f48c5005c4dd97ac172c07fc257e9d287c14ae1171626a7b86d7fe1a78af05c3bbc7fb08b389c27c18745b73009f77632bbbcc4e", 0xc1}, {&(0x7f0000001780)="dafe01bdc3e828314bf5db7080827920b7cf6e22891fec1d66692a35ee0d108d24bac2cf2c9b44578b7f8c402fadf05668abf37679cde179fe29bdc58e77da6a491cc2c9df1c18efb6fe5abea4b94cf04a08bfa95a5bb71e19da36ae08e52e131e34e8d4b086af247487154373190c77", 0x70}], 0x4, &(0x7f0000001840)=[@hopopts={{0x100, 0x29, 0x36, {0x3c, 0x1d, [], [@padn={0x1, 0x1, [0x0]}, @pad1, @generic={0x200, 0xc7, "23092a138e22fadd4cdff58157eea1116822006f81fff1361f337c6bc8fbd6e89931f5ede9389b9e3d6312e3c96f9abe31353102182ce873b2de8b1ad98054ea0439c40e57aee055ec3b682e1bc20b5e2a30b4f688c65ecb53459c576d0d2a50c720a5653006fb456db096d5298bcbee2709d5964a3350e8e71b371cdc5671a5b626c02617ba70b8f3af597b6aa69f70e89f265d77b0b4322fd08df46fe980522a5f3cc5ed77720356dd26ea468bfcb2171687cb26e9262f3e5482ea1999d48ce2e57eb8deea6b"}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x6374}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x0, 0x9, [], [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x10000}, @calipso={0x7, 0x28, {0xc94b, 0x8, 0xe6a6, 0xffff, [0x8, 0x40, 0x40c, 0xc0000]}}, @enc_lim={0x4, 0x1, 0x80000001}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x1f0f}]}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x1, 0x1a, [], [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xfd, 0xc3, "649d7ba1df0a3316fe8df1b07e6d2b36109b74bf1f5987a1671dffaac28c003d25c0622860994332281ae22cf9ff553734afc1864b445e7cc7562f263a3a722ff9ef2ea840eb96b094b2ae7c7492c9dce8b9fb6c0efeef53db5173fee9d56dd163fee86103abb8dbd14ec72e9caff2ba6df6458c997304461139842c4fc9bf63f0685091e54cac9268dec7abc3b59fbdee4bb805adea07c1335190c8990f3964c112d76cbfa6b1de0ef954929527ab90003387cb677472fff8d0ce680c5e379416b15a"}]}}}], 0x288}}], 0x5, 0xc000) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 23:14:56 executing program 2: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000280)=""/35, 0x23}], 0x3, &(0x7f0000000500)=""/139, 0x8b}, 0x40000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000600)=0x203, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@local}, @in6}}}, 0xf8}, 0x8}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$inet(r1, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETX(0xffffffffffffffff, 0x5433, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$binfmt_elf64(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="2d9908ba9201d4e9a788906599ab8de42f15a6bab6c2a6f458812308dafa27269007b29e00a5a765951b56af0fbc027bf9abe8771eac3d0c000fb733885c93f8ffe29411d611b770f90a07ab225427dcbc0589de8d3f55b00d89605051f764062ab004b83c3d6a276e021008", @ANYBLOB="149f9703a79bd91d8ba0d6dc19c00dbb3d1253fcfac6c916a1007a4f3743a493d33d9fb2d52c36c98b4f90dcbcb84b6531b750271b8743e64ff8d42634103e9ba0981d5058913bfa8aed14736b19ffe78dfd560458253a9637a7d68593b873e618774b4eb1d20bb948111e8efb84d16afb6cc9536f0021db2ab4dc51b766a2eae100273d7c1e366fedb0c2c205454de1fb9ba795dcc807c0f3eed689dc01d7", @ANYRESOCT, @ANYRESOCT=r4, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYBLOB="d80a9eb2cbbaab50eef67abbd45dc1dfdbb5e7709f6d2a3fc4fb7f29f59f693fe98862fc", @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRESDEC=r5, @ANYRES16=r0, @ANYPTR], @ANYRESOCT]], 0x141) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x9374198da76905ac) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000740)=@add_del={0x2, &(0x7f0000000200)='eql\x00'}) 23:14:56 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0xffffffffffffff33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) wait4(r3, &(0x7f0000000180), 0x1f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c", 0x44}], 0x4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x8, 0x40000) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000001c0)=""/139) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:14:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:56 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="d8beb3b4914e1e3122fd045be5152e60"], 0x7, 0x0) waitid(0x1, r3, &(0x7f0000000280), 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) r4 = socket(0x200000000000011, 0x2, 0xdd86) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r6 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x20) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) getpeername$unix(r8, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) renameat(r6, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000400)='./file0\x00') bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r9 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x30) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCCBRK(r9, 0x5428) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) [ 349.201376] binder: 13479:13481 ioctl 54a0 0 returned -22 [ 349.233801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/access\x00', 0x2, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/24, 0x18}], 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x282) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) write$P9_RREAD(r6, &(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYRESDEC=r7]], 0x8) sync_file_range(r4, 0x0, 0x20, 0x7) write$P9_RCLUNK(r4, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400200, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x8}) sync_file_range(r3, 0x0, 0x20, 0x7) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x51, 0x1, 0x4}}, 0x14) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000440)={0x0, 0xacf}, 0x8) r11 = accept(r10, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') r13 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r13, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r13, 0x0, 0x20, 0x7) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000380)={'irlan0\x00', 0x2000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r11, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r12, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00022abd7000fcdbdf25010000000000000009410000004c0018000003d26962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0ab6beed47dff70b2cb062318300000000000000000000000000000000000000000000002f5855d0821c158308062e936ddbb44afe647ccb03bea7802ec3a37f73ea7243d24cdb87ace9b2cca18f639a08334bde98a9359f2f489b268feffe1f4d01d125286294296b70cde62ae81d0420c848eb727bbb0902ab71f2e4c728bb98edf1a3987734da6bfc13c6d7a0e19200000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x5022) ioctl$TIOCSIG(r3, 0x40045436, 0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) 23:14:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000089c0), 0x4000000000001e4, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000003b2, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00', &(0x7f0000000140)=""/190, 0xbe) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 23:14:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 350.407018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, 0x0, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r1, 0x98, 0x6f}, &(0x7f0000000100)={'\v\xafc=', 'raw', ' hash=', {'md4-generic\x00'}}, &(0x7f0000000180)="bec97523fe67af25e48578bfed22db7496231fff51716dd12f5690ed46c63ff4ee264bab5be045d09c024647e8b7a7c0825641ec30f903bae005bbda5c602bac1109f33b8333518ce1abb4b2c783914ae8f18c3574996b2b7fc06eeb36e4241851d8b4fe4ff9b77e2fba65cb1d724c510ab6cbde901059d1ad4d4bbb67b298176de64ada345a523fb79a5128aaffc42fd6e70e83b2f0c83d", &(0x7f0000000240)=""/111) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) [ 350.471236] binder: 13512:13513 ioctl 54a0 0 returned -22 23:14:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write(r0, &(0x7f0000000300)="2225e9e37751086ead7c51eb864aeec9fe33ede85e2c63d4dfe5f19f0f69790237afa3b468b21f417db4d7281332fbacd76a364a020b79", 0x37) read(r0, &(0x7f0000000480)=""/250, 0xfffffffffffffdec) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x101002, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000200)={0x7fffffff, 0x18, 0x1, r7}) read(r5, &(0x7f00000021c0)=""/4096, 0xd69) socketpair(0x0, 0x6, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000680)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000001800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0004000}, 0xc, &(0x7f00000017c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c4100000280020002abd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="0a000000fffff1ff020008000800050000ff000008000100647272000c00020008000100050000000800010063627100741002001800010036001d01f8ffffffffffffff01000000070000000404060004000000040000000000000007000000580b0000080000000500000009000000ff03000000040000090000000300000006000000ff010000010000007e000000000000800300000001000000000000000500000003000000040000000600000006000000ff00000076135073020000000700000000000000000000000400000006000000e3ffffff04000000050000008100000000000000010000000400000009000000968a00000100000002000000400000008000000008000000060000000300000003000000570f05140200000000008000ff010000000000800900000020130000da030000ffff0000e9000000f1ffffffd8ffffff04000000ff07000004000000000000000200000002000000040000008100000002000000040000000600000009000000149d0000080000000700000051080000070000004448000000000100ffffff7f950000000900000001040000000000000300000093000000060000008100000001000000030f000001000000090000000700000007000000ff0f00000100000000000080810d00006f0000000000000005000000000000000300000001000000090000007d0000006000000000000000080000000100000005000000020000000900000001000000010000000080ffff0700000001000000000000000900000003000000000000003d260000a500000080000000010000000100000040000000ffffffff00000000ffff00000800000001040000800000008b050000ffffffff01000000010000007f00000008000000feffffff3a0c0000000000008000000004000000020000003f000000b800000015000000ff070000010000000600000000000000020000000500000053000000f9ffffff04000000ff7f0000010000000100008008000000010000000300000000000080000400000400000006000000ff7f0000060000000f6400000300000001000000050000000200000000000000040000000500000008000000050000000400000007000000040000007f000000a50700000300000018000000ff030000000000000000000038000000fe040000060000000900000001000000030000001800000003000000070000009f2b000004000000535c000008000000e69d000000000000610a000008000000000000000800000000000080ffffffffae09000093217c0a00000000b300000001000000018000000200000000000700ff0100000300000009000000ef080000050000000500000000000000c1ffffff06000000008000000600000085330000f90000000001000008000000ff000000040000000300000006000000000000808500000000000700030000000500000003000000d30e00000700000006000000ff0100000400000009000000010000006a0d000000000000ff0700000404060000000000fe00000059060000060000000800000006000000090000003d0f0000030000007f0000000000000002000000d7bc0000000000000000000000080000000000000700000004000000020000003f0000000100000007000000030b0000ff7f000004000000050000000000000003000000f7ffffff00000000060000000000000002000000be000000ffff00002ea0000007000000000001000800000007000000200000004a0b0000ff010000f4b500007a6e950c00000000ff0100000300000040000000010000000500000000000000080000000000000005000000010000000200000000800000dba200000000000004000000010000005a00000004000000040000002000000001800000ffffffff06000000ce000000b4a200000100010004000000200000000400000003000000800000000600000007000000feffffffbebd0000ff000000070000000300000007000000050000007b0000000600000000000000eb7e000000040000090000007268000007000000d4000000050000000104000006000000d30000007d020000ee00000000000000050000000400000000000100e6d2cc0400800000ff0f0000f8fffffff7ffffff0e4800000500000003000000060000000600000009000000050000000300000007000000080000000500000009000000018000000100000006000000060000003f00000000000000ffff0000800000000900000005000000ffffff7f03000000000000007f580000000400003f00000004000000018000000100008001040000010400000300000000000000000000000200000001000000344100003a900000ff0f0000050000002a0000000600000005000000810000000100000005000000020000002f00000007000000060000000000000006000000ffff00001f0000000200000035a20000dd0000000800000002000000000800000100000001040000bc276ccc050000006600000001000000020000000101000006000000060000000700000004000000050000003f000000172300000300000000000000070000001d430000020000007f0100003f00000001000000727b464306000000ffff00001f000000030000001d8d0000ff0700000200000002000000ff0f00003f0000000900000007000000ffffffff0600000006000000ff000000040000000300000000000000ffffff7f0800000009000000fafffffffdffffff010000000600000005000000080000000000000008000000640000000500000002000000ff000000ff7f00000100000020000000030400000500000001000080030000000300000000000000ff0000000100000007000000010000003f000000e0ffffff00000000ff0f000001000000570000000400000000000000000000000200000007000000010000801000050003033f000000000006000000100003000d00080000040000b2040000100005000002040000000100000000000404060001040000080000000100000008000000010000000000008006000000020000009f000000090000000000000004000000f8ffffff01000000000000000200000001800000050000000200000000040000ff0f0000ffffffff01000080010000000500000006000000ff7f00000200000003000000030000000200000009000000000000000100000008000000f8ffffff0500000004000000060a000006000000000000800c00000006000000ff0000000000000005000000800000000900000001000000ff03000062c6ed570002000005000000010000000000000004000000060000000300000008000000ba0a000001000000ffffffff01000000000000000180000000800000ff030000020000000000000007000000ff0300006f0900000200000003000000060000000200000008000000d000000004000000090000009d9e00000400000000100000070000000100000000000000000000000800000093c700000400000004000000ffffff7f020000000100000001000000ff000000070000000104000009000000070000000900000008000000fdffffffd000000003000000fe00000008000000fffbffff070000000100010005000000050000000600000002000000090000000300000002000000ff010000030000000700000003000000010000003f0000000f00000006000000020000002e020000ffff0000010000000400000002000000ff010000000000000700000001000000000001000700000000000000d600000001000000010000000100000005000000a1000000000000000080ffff0600000007000000310d00000500000055de0000590000000000000004000000150b000006000000010000000800000080000000ff0100000600000081000000000800000000008006000000020000001040000007000000000000000400000001000000f8ffffff08000000060000005009000003000000000000000600000062010000e007000066000000020000000700000002000000030000000300000000000000010000800100000000000000090000000400000059000000070000000800000008000000ff0f00003f0000000300000008000000fc0000000900000001000000f50000008000000008000000ff0100000300000005000000050000008e00000001000000030000000000010080000000bb0c0000ff0f0000060000004a000000030000000500000000000000f500000008000000020000000100000006000000040000005c0700003f000000080000000500000002000000010000009300000009000000200000000500000004000000060000000101000001000080080000006200000054000000ffff0000f10f0000ff030000ce0000000400000003000000fcffffff0000000009000000bb000000040000001800010030000d0763ffffff03000000ff070000f8ffffff040406000800000005000000aa34d15906000000ff01000007000000e207000007000000040000006e0000000900000003000000050000006e00000000010000070000000200000040000000080000000900000007000000ebffffff8e020000a30500000000000006000000030000001f0000000104000004000000f9000000030000007f00000009000000020000006a0c0000fd00000007000000000400000300000007000000010000003ee0000001000000090000000900000040000000680000000900000026010000010000004d000000f7f93b2400000000f9000000000001000800000080000000fbffffff050000000800000085d6000005000000010000000000000001feffff06000000160700000600000000000000f8ffffff0400000001000000447e0000c2aa000000000000ff7f000007000000000000000700000006000000ff010000200000000700000003000000faffffff02000000ff00000081000000010000000600000001000000f7ffffff050000000100000007000000140000000000000000000000070000000600000001000000060000000400000007000000ffffff7f81000000060000000100000004000000008000000008000001000000dd365422f6060000b1510000400000000100008000100000ff030000ff0f0000050000004d000000040000000500000043000000010000000300000009000000ffff0000060000004c3b000065ffffff020000008400000003000000ff000000070000000010000000000000050000000900000007000000ff0000000001000004000000010000800700000006000000ff000000080000000500000002000000080000009601000009000000ffffff7f0500000006000000040000008000000003000000ffffffff0100000000000000e94e9b4d010000003f000000020000000700000007000000418300000002000001010000000000800900000005000000080000000100000007000000020000000000000000800000ffff000006000000ff0f0000010100000000010008000000e20700000900000004000000442c000081000000020000000500000007000000e10000000100000002000000c45400000700000001000000e1050000f8ffffff6d03000002000000000000800080000008000000030000003e0d0000fbffffff0300000004000000520000006cf900004000000007000000070000005c0000003f00000006000000fcffffff02000000610b0000010000009d040000ff0300004a00000018100000080000001f0000000300000081000000060000000100000006000000070000000400000002000000ffff000004000000f5000000010000006a0000000800000006000000069000000400000005000000050000001504000001000000479e0000000000000800050007ff0000"], 0x10c4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_mreq(r9, 0x0, 0x0, &(0x7f00000000c0)={@broadcast}, &(0x7f0000000440)=0xffffffffffffffe7) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000001c40)=""/246) r11 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r11, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x100010, r8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, 0x0, 0x0) sendfile(r3, r11, 0x0, 0x102002700) dup2(r2, r3) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) 23:14:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0xf) 23:14:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) socket$unix(0x1, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) fstatfs(r3, &(0x7f00000001c0)=""/91) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f00000003c0)={0x0, r6+30000000}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) clock_gettime(0x3, &(0x7f00000006c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240)) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='ip6tnl0\x00', 0x10) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f00000002c0), &(0x7f00000004c0)="0a20e955455d4db23b110f5acaa873287f9087b893e4918efb1d5c8e391b1edda1a95dc432214f3afa96d05920ae29cf6f33c86534d9759147bf02843c3b4186ee16426d295431fdb3d37f64574744eb57e35ee40eb626f49551761250d8b86695cc74434f3566c246730495fbfa95a28a2fea2ce05d28e3d040f96707e2bd05e101537cc32efdfb19c51d78ce1f4247ed2169f20595c825fcb0e3ce9b35af7147e80676bf07fc3efc82296354a147e280dedc79a7a8ac35937d9cd787decd5b85126944ac6d35d9b5435ad0c78bba7d149d487b421b6401cea9f50a20221b0acfb9289266195e39000c7ad6f9c2", 0x1}, 0x20) sync_file_range(r7, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000180)={'ip6gretap0\x00', 0xc6fb}) 23:14:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x14a240, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 23:14:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 351.114763] binder: 13549:13551 ioctl 54a0 0 returned -22 23:14:59 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0xffffffffffffff33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) wait4(r3, &(0x7f0000000180), 0x1f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c", 0x44}], 0x4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x8, 0x40000) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000001c0)=""/139) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:14:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000002a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9468a808f6b6d7a7729dab700000000000000000000000000000000000000000000000000abd25f2a102c2603dbe8000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00"/284], 0x10c) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000002c0)=""/193, 0xc1) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="d2a2d3ba1cc6a41a98b52d91c165b3ccd2628bcec8b50dd3cad0fb49f9a2d04e925ab00967dc137a1455fa0d4cad95806d377af9334243d52fd629e42ee6fd8062cc57369018ef787cd5fb827c91ab4d8889497ea4c60cf19a4789e4bff37cc728e24344b78471e8129294388c5ccb0d5509162ebf788e0f056fe1085cfff0fc83c1f180616631fa705d4f4b77dae343d6849b7e702ec6a671", @ANYRES64=0x0], 0xa1) sync_file_range(r2, 0x0, 0x20, 0x7) fchmod(r2, 0x40) 23:14:59 executing program 2: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) memfd_create(&(0x7f00000006c0)='uid', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ioctl$KDSETMODE(r0, 0x4b3a, 0xffffffffffff0df7) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000a40)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x14000) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r6 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @loopback}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xffffff5a) mount$fuse(0x0, &(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000100)='fuse\x00', 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000000,max_read=0x0000000000008266,max_read=0x0000000000000001,dont_appraise,obj_user=.+%,subj_type=ramfs\x00,fowner=', @ANYRESDEC=r5, @ANYBLOB=',fowner<', @ANYRESDEC=r6, @ANYBLOB="0000001020", @ANYRESDEC=r7, @ANYBLOB="090400faffffff006287f5bba176c87ec11e0767944efd809b523534d3387046a307a960e305c5dddabc904f9aca1932d335e0dcea3a82857374ca6a8edf0961a5bcc691185ea23cfcc8ed1ebaf05e05c9f14951599932e2f195642e2358de6c20ae26eef6d169ee8390c12a3b58ee05acb337625f5b651a57827e1b79635b3993630e", @ANYRESDEC=r9, @ANYBLOB=',\x00']) syz_open_dev$binder(&(0x7f0000000700)='/dev/binder#\x00', 0x0, 0x802) fchdir(r1) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/status\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8001) write$P9_RREADLINK(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="e65b7213f6012f66b00000e900e0ffffffffffff816f00000000d7e81ad4710214b1"], 0x22) sendfile(r10, r10, &(0x7f0000000240), 0x7fff) 23:14:59 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x100, 0x10000, 0xa, 0x0, 0xbd, 0x0, 0x2, 0x5, 0x0, 0x0, 0x3dc, 0x2, 0x0, 0x0, 0x0, 0x12f, 0x0, 0x7, 0x4, 0x6, 0x4, 0x48, 0x1f, 0x7f, 0x1, 0x0, 0x0, 0x2, 0x1, 0x7, 0x401, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x4201, 0x100000000, 0x40, 0x1, 0x8000, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x6, 0x9}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000002400)=""/4096, 0xc8b7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) 23:14:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:14:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x71, 0xa631e1cf16f5529f, 0x6, "8ab2bd241d66a7260ca67fb777bb9e09", "292c4abc6055f92547c37ea1a625a7107e1a88ba6488d8d270a219ac8c0590ad37e55fd3e019d0ff33f97cc63806ad43476b4b83c7012b8d3b227cb2eb88d1528999baf1df1aab03d241af234b86f9787273a6f4bf0b72bfe4bc0836"}, 0x71, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x608000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) pipe2$9p(&(0x7f0000000000), 0x8000) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100000000000], [0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c) clock_getres(0x1, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) lookup_dcookie(0x0, &(0x7f0000000100)=""/219, 0xdb) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x700}, 0x18) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x10000, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @initdev}, &(0x7f0000000380)=0xc) 23:14:59 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="c1b700ddbce70a877d2387116a8dcaeda4a2b37b318cae030791c90a93a2637debff50f8bbb070f79ccafe6e5191d69bd59facbf6a51be7dc0ceb12eb18bdc8ff2e5f55b0ed3c58e8d4f60836e74fad204d86c63b9910725583ae7fb8d0515fad043fc35ab3f613168fc96206dd42944e6a5f01d997786499dc07b505a741a29b6990a8ef5b66ff5d05713adb9a1649be5af9ae0698c7a20425e2ad86e7c010f2181d67ea2fbfcfcec05378485251645bb1adaf9fd4d5e70c659ada5bb410d27644795928aea97cb5e365e9613b5109a", 0xd0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000000)='./file1/file0\x00', 0x10) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000007c0)='./file1/file0\x00') rmdir(&(0x7f0000000100)='./file1\x00') creat(&(0x7f0000000040)='./file1/file0\x00', 0x71) [ 352.071218] binder: 13573:13582 ioctl 54a0 0 returned -22 23:14:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xf) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000080)=""/101) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x17) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4), 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/246, 0xf6}], 0x1}}], 0x40001d1, 0x0, 0x0) 23:14:59 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0xffffffffffffff33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) wait4(r3, &(0x7f0000000180), 0x1f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c", 0x44}], 0x4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x8, 0x40000) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f00000001c0)=""/139) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 23:14:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@dax='dax'}]}) [ 352.825814] EXT4-fs (loop5): dax option not supported 23:15:00 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e9361352ec0e761, @perf_bp={&(0x7f0000000080), 0xe}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "4743f01b"}, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp\x00') r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) splice(r1, &(0x7f00000000c0), r2, &(0x7f0000000100), 0x1, 0x1) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x60ffffffffff) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) 23:15:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:00 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x3, 0x23, "f59bda0c54af1b4098c1dffac4468dcfb09cc8aeb749a1ea809b885397f6ea1de46c4b"}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) [ 353.295308] binder: 13637:13638 ioctl 54a0 0 returned -22 23:15:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:02 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() timer_create(0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB], 0x7, 0x1) waitid(0x1, r3, &(0x7f0000000280), 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) getgid() r6 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)={0x17}) 23:15:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe5b6c4e244c67c44}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_getaddr={0x9c, 0x16, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x1f, 0x284, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x3, 0x1, 0x7}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x80, 0x8000, 0x605}}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_LABEL={0x14, 0x3, 'ip6_vti0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x32f2, 0x3ff, 0xe, 0xa459}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8, 0x0, 0x9}}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_BROADCAST={0x8, 0x4, @loopback}]}, 0x9c}, 0x1, 0x0, 0x0, 0x3b47f52af0945b4f}, 0x20080040) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) getsockname$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfeac, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x30}}, 0x0) 23:15:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0x7}, &(0x7f0000000200), &(0x7f0000000100)={0x77359400}, 0x8) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) accept4$inet6(r3, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000f00)=0x1c, 0x80000) open(&(0x7f0000000f40)='./file0\x00', 0x40a540, 0x8) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f00000003c0)=[@request_death={0x40046304}], 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000f80)) r7 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r7, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r8 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r11, r9, r10) r12 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r12, &(0x7f0000000200)=ANY=[], 0x5aa78d33) 23:15:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) getpeername(r0, &(0x7f0000000040)=@in={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x80) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) accept4$packet(r1, 0x0, &(0x7f0000000100), 0x80400) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 355.056567] net_ratelimit: 5 callbacks suppressed [ 355.056575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.064208] binder: 13652:13658 ioctl 54a0 0 returned -22 [ 355.101800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:15:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)) get_thread_area(&(0x7f0000000000)={0xd69a, 0xffffffffffffffff, 0x2000, 0x3, 0x40, 0x5, 0xcdb, 0x3f, 0x80000001}) [ 355.163864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:15:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 23:15:02 executing program 4: syz_read_part_table(0x0, 0xaaaac68, &(0x7f0000000200)=[{&(0x7f0000000080)="0200bfffffff01000000ff07000000000000000200000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e24, @empty}}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x28000000}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 23:15:02 executing program 2: r0 = add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="95aba3c310faf571120819a2b0dbd7b67463cfd646f003b20d3c229334f24aff6780f580650df34d8bcd8fb30b16031caf4aec9deeab655849f1ff31707559acd395565c9dfec02d2af2911438aec33488f69248879b60c4", 0x58, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, &(0x7f0000002240)=""/4096, 0x1000) 23:15:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0xa0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) r2 = syz_open_pts(r0, 0x0) fallocate(r0, 0x0, 0x400, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}]}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f}) 23:15:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f73f27209ed44704000000000000001c86ad6215382213"], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000000c0)) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="9c61c3094c1f3fb5bb12403d531e706c1585974ace3edbe83a8dfe2534eea4651696626439d704fc3732a742ca992e73984388394d2795dbcdf63c931301b0af9e378357b8b03d67e5188b4f6aeb97e8363935dcdca797235952adb440885c9a8888dd6f2cc9fd20fa35258bfddc65628c364809db215cd8fe10972c9aee7e83606d11b873b9a3b8c6915634"], 0x8c) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") [ 355.612878] loop4: p1 [ 355.616238] loop4: p1 start 1 is beyond EOD, truncated 23:15:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00\x00\x00\x00\x05\b\x10\x02', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x9000000000000, 0x7, 0x5}) sendmsg$netlink(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, "", [@generic="d63120a9ae916068d493a0275c82932df4d462ef25219dbb268a300836ff3eef5e3df23846cc9fe1080ecf123b"]}, 0x40}], 0x1}, 0x0) 23:15:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 356.006230] binder: 13709:13711 ioctl 54a0 0 returned -22 23:15:03 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x515) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) setuid(r10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f00000001c0)={0x9, 0x100, [0x4, 0x0, 0x80, 0x1f, 0x5], 0x100000001}) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) mknod(0x0, 0x10, 0x9) socket$unix(0x1, 0x1, 0x0) 23:15:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="9f8a34", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dc0897a818d9ba796962b37abafb183b6cebc1f59f6694b05a724b0ec8e5906fa14d11ab3bf00516ba6a631ae437df5c7804e79850b1ebd2132defd0978", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,blksize=0x0000000000000800,allow_other,default_permissions,allow_other,blksize=0x0000000000000200,\x00']) fcntl$setstatus(r0, 0x4, 0x800) read$FUSE(r0, &(0x7f0000003000), 0x1150) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x1) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x600b0, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0xfffffffffffffff8}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x80000000000}}], [{@subj_role={'subj_role', 0x3d, 'user_id'}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) 23:15:03 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000001c0), 0x167, &(0x7f0000000200)={&(0x7f0000000340)=@getlink={0x2c, 0x12, 0x60d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x4}]}, 0xe3}}, 0x0) 23:15:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 23:15:03 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) setitimer(0x1, 0x0, 0x0) 23:15:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=""/240, 0xf0, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000080)=0xb7, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f00000000c0)) 23:15:03 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sync_file_range(r0, 0x1, 0x4, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xffffffef) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x82) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) shutdown(r3, 0xa327e7fc2e391970) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x10000) 23:15:03 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2fd311bafaad3f93) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 356.517521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.531199] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 23:15:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000180), 0xfffffffffffffd6c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 23:15:04 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup3(r2, r1, 0x0) sendmmsg$sock(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xf9, &(0x7f0000000780)=[@mark={{0x14}}, @mark={{0x0, 0x1, 0x24, 0x101}}], 0x30}}], 0x400000000000155, 0x40) 23:15:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000540)=0x10) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x438, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x691b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x45, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x8, 0x4) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x758, 0x4) sync() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4012}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x0) execve(0x0, 0x0, 0x0) clone(0x80000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000240)) openat$ashmem(0xffffffffffffff9c, 0x0, 0xc4060, 0x0) 23:15:04 executing program 5: clock_settime(0xa, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x1000, 0x6, 0x2, 0x8}) 23:15:04 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xd, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140), 0x4) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fallocate(r2, 0x1, 0x1de, 0x4) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/133) 23:15:04 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) ioprio_set$uid(0x3, r1, 0x7) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x4000030000000304, @broadcast}, 0x2, {0x2, 0x0, @remote}, '\xecJ\x00\x965\x00'}) 23:15:04 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b9d8cd80"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000480)='%', 0x1}], 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="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"], 0x0, 0x14a}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:04 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x80}, {0xffffffffffffffff, 0x8000}, {r0, 0x8081}, {r2}], 0x4, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={0x4}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000740)='trusted.overlay.origin\x00', &(0x7f0000000780)='y\x00', 0x2, 0x1) ftruncate(r0, 0x10002) r3 = socket$key(0xf, 0x3, 0x2) write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/2563], 0xa03) sendfile(r0, r0, &(0x7f0000000180), 0xff8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0/file0\x00') r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8001400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000001200)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xfffffffffffffe3e) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in6=@dev={0xfe, 0x80, [], 0x29}, 0x4e21, 0x2, 0x4e20, 0x8c8, 0xa, 0x20, 0x20, 0x3a, r7, r8}, {0xffff, 0x1, 0x3ff, 0x8, 0x3ff, 0x7ff, 0x5, 0xffff}, {0x7e84, 0x0, 0x100000001, 0x9da5}, 0x10000, 0xd59, 0x0, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x3505, 0x0, 0x1, 0x1ff, 0x9, 0x4, 0xfffffffffffffbff}}, 0xe8) 23:15:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x5e584e68e4700cf8, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x315aed88718b3036}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffd}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 23:15:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0x0) 23:15:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) alarm(0x3) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x2) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x7fc, 0x0, 0x0, 0x40}) pwrite64(0xffffffffffffffff, &(0x7f000003bfff)='/', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$KDENABIO(r1, 0x4b36) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:15:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:05 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) wait4(r2, &(0x7f0000000000), 0x2, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d3e1bb030001001c8c0f34b2"], 0xc}}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x5, 0x1ff}}}, 0xfffffffffffffcea) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000000001c) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) tkill(r4, 0x26) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) r7 = dup2(r5, r6) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000200)="9d73df6eb8f4af27ea1fc3a9158a971d1bcf4e2a17e61b16a133e602c059bf877afe26329a0aba5291acf9f850a11d5085714273a61a0a5ee6783d04b946e305322a9fa9b6e1f2cc05794b131c29324f1fc9d9da485d22b1d05db8b1ac4d31b576123f631d80528a7f65b5e72baa3b8407fe0db1b1e7445680923e28a88d21cc38701253fbdaa5f9b5c8dbe4b8a6cd2042c8e3a46380bd2d412f45ee75ca9fcceffb666f8fd9daeeac99de8d4ea220f488ce9828c6bd8cca4191304c88e869f9e070335bb2b7828511ae4ca03c46d181977b3f01964a89c5134dfff23c511158873f2540046e30b44d80c1962cbcb588f034c3fd1c1f20983a", 0xf9) [ 357.918097] binder: 13828:13829 ioctl 54a0 0 returned -22 23:15:05 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0xf312bbeb9798ef73, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x2001}) 23:15:05 executing program 2: clone(0x11000, 0x0, 0x0, 0x0, 0x0) 23:15:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) pipe(&(0x7f0000000140)) epoll_create(0xb) unshare(0x20000400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 23:15:05 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) vmsplice(r1, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="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", 0x105}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) ptrace$cont(0x18, r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038005", 0x21) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xef9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000e27fa7232f6f131d0000400ae14a9319d5e2ebdc3c9544d26897a33b2feddfd29c31"], 0x0) mkdir(0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x0, 0x6, 0x8f8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[], 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000440)='fuse\x00', 0x5, 0x2) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) unshare(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xe11) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x8, 0x0) 23:15:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000003, 0xc0e) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7}, 0x25c) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000240)=0x54) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) fallocate(r2, 0x19, 0x4, 0x110001) write$binfmt_elf64(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/904], 0x388) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 23:15:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/85, 0x55}, {&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f0000001280)=""/203, 0xcb}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000001380)=""/140, 0x8c}], 0x6, 0x6) socket$key(0xf, 0x3, 0x2) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4ef27f454c4600000032026c000000000400145c01442309d013000000000000c12eeaaed186880000000000000000"], 0x11a) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) writev(r2, &(0x7f0000001540)=[{&(0x7f00000014c0)="3e68be1cfe1f22e94a82afca344d14441c35b5d497cd96400af105f64b688cda92dc9dcb7e36c4f2445acd7c991a2e24b857364292965dc4b183f0275a95d98bd0bdbfccd99716f2f4d295d1b6", 0x4d}], 0x1) 23:15:06 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80, 0x8000, 0x3, 0x5}, {0x7, 0x20000000008, 0x1}]}) fstatfs(0xffffffffffffffff, &(0x7f0000001180)=""/4096) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) write$P9_RWALK(r0, &(0x7f0000000040)={0x30, 0x6f, 0x1, {0x3, [{0x20, 0x1, 0x6}, {0x2, 0x3, 0x5}, {0x2a, 0x1}]}}, 0x30) [ 359.017778] binder: 13870:13873 ioctl 54a0 0 returned -22 23:15:06 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket(0x100004400000010, 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x800, 0x5) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x2, 0x4) write(r0, &(0x7f0000000480)="2400000052001f0014f9f407010904000a00071004000100f6ffffff0801000000010000", 0x24) 23:15:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="401bccd3d2bb0200802014a20f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) tkill(r1, 0x37) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:15:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa7002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpgid(r1) restart_syscall() r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) perf_event_open(&(0x7f0000000080)={0x96f34b752c841255, 0x70, 0x9, 0x6, 0x6f3fe267, 0x2a30, 0x0, 0x9, 0x10102, 0x0, 0x200, 0x6, 0x6, 0x80000000, 0x1, 0x2, 0x1ff, 0xffff, 0x80000000, 0x9, 0x1f, 0x0, 0x800, 0x7, 0x7, 0x1000, 0x6, 0xdef, 0x4, 0x101, 0x7, 0x7, 0x3, 0x5, 0x1, 0x2, 0x1f, 0x9, 0x0, 0xfff, 0x0, @perf_config_ext={0x8000, 0x2}, 0x1000, 0x6e, 0x20, 0x7, 0x200, 0xc1d8, 0x4}, r2, 0x7, r3, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 23:15:06 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x20000, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x5}}], [{@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}]}) ftruncate(r1, 0x200003) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x100000488) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:15:07 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x800000000024) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) 23:15:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 359.881172] IPv6: ADDRCONF(NETDEV_UP): lo: link is not ready [ 359.888022] IPv6: ADDRCONF(NETDEV_UP): ip_vti0: link is not ready [ 359.901146] IPv6: ADDRCONF(NETDEV_UP): ip6_vti0: link is not ready [ 359.915502] binder: 13904:13905 ioctl 54a0 0 returned -22 [ 359.937306] IPv6: ADDRCONF(NETDEV_UP): sit0: link is not ready [ 359.957468] IPv6: ADDRCONF(NETDEV_UP): ip6tnl0: link is not ready [ 359.980670] IPv6: ADDRCONF(NETDEV_UP): syz_tun: link is not ready 23:15:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000001880)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000001900)) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r1, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffe) r5 = dup2(r0, r3) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000000)={0x201f, 0x1}) 23:15:08 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) write$P9_RLERROR(r3, &(0x7f0000000140)={0x9, 0x7, 0x2}, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$unix(r4, &(0x7f0000000080)=@abs, 0x6e) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0xffff}, 0x14) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 23:15:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) removexattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)=@random={'os2.', 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0x7, 0x3c, 0x6, 0x7fff, 0x0, 0x400}) 23:15:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 361.574727] binder: 13920:13925 ioctl 54a0 0 returned -22 [ 361.619763] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 361.745501] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 7 (only 16 groups) 23:15:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6b, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) prctl$PR_SET_UNALIGN(0x6, 0x1) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7) 23:15:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000280)) syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffffffe1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="e65b7213f6012f66b000000000e0ffffffffffff816f00000000d7e81ad4710214b1b5"], 0x23) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0xfffffe86) getsockname$unix(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) getpeername(r0, &(0x7f00000003c0)=@un=@abs, &(0x7f0000000180)=0x80) fgetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0) 23:15:09 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000003c0)={0xfffffffffffffffe, {0x0, 0xfffffffffffffffb, 0x1c, 0x7, 0xfffffffffffffffe}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000a2eb52f54686c4af98"], 0x30}}, 0x0) getdents(r1, &(0x7f0000000180)=""/79, 0x4f) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x7fff, 0x0, 0xff, 0x2, 0x24, 0x6}, 0x20) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) 23:15:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xa880) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x100000001, 0x4, 0x7, 0x8, 0x10, 0x2, 0x7, 0x0, 0xfffffffffffff294, 0x4, 0x9, 0x9}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x3) sendfile(r0, r1, &(0x7f00000000c0)=0x20004b, 0x9) socketpair(0x8, 0x80003, 0x6, &(0x7f0000000000)) 23:15:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x32}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0x0, 0x2}}]}, 0x13c}}, 0x0) 23:15:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) removexattr(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)=@random={'os2.', 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0) stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0x7, 0x3c, 0x6, 0x7fff, 0x0, 0x400}) [ 362.571675] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 23:15:09 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) fchdir(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x2bc611a1646edf7b) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000140)={0x3ff, {{0xa, 0x4e20, 0x8, @mcast2, 0x4}}, {{0xa, 0x4e23, 0x2, @loopback, 0x40}}}, 0x108) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x3df, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000d80)) 23:15:09 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x616, 0x0, 0x2c2a}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x306) [ 362.646082] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.717165] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 7 (only 16 groups) [ 362.820910] binder: 13966:13969 ioctl 54a0 0 returned -22 23:15:10 executing program 5: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket(0x80000000000000a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x32}}) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 23:15:10 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000580)=ANY=[@ANYBLOB="d10c0000c2000000b2818f516608292d23ed231c5339b3732c44988ec07e39f5f11bde1f13fc49efa4cba7b0cf59c17843a0bc2f3baca36b041bcf074ef4b3b0947a8ca56e7e17364205d03320eaacdb3427cafbd7a18645126660d4aab39e51ca2f453663678a798ffc347723cc0335ed095a30f0eb612d5c614683b18afd6cc56f4675aa3d12c9fb026645b6f216d2e732abdff7fa36b93f49dc09001e253c8a59c55aa40000148acc3cb5be3c4b1835daf947ac7d6ba0881a28ebb1f594afbe6e33f68a3dd8"]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) open(&(0x7f0000000180)='./file0\x00', 0x513800, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$assume_authority(0x10, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="73cb4f5f00ad4c6d59ff1291dac816f5e194fb4882093322c97e609599a36c9a79c14c3e9b7b941d4a40d77e0cb140a728786409feceb2df0dfc5bca8dba7cd5f81196b8a7b127aa8fdc44198036afc79d1635b7a719813d8eef8912f021fb80aa05d39e2112b73d3761cc93464f57f4b0985ea05ecdaaeffe6a204999135bc5525310edbcaee5c160171da6b634cce69ba45bfacd9d27e525", 0x99, 0xfffffffffffffffc) keyctl$revoke(0x3, 0x0) creat(0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000340)='\xd1?\xf3\xd7v') ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x7, 0x0, 0x1}}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000100)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f60000030000002272a062b49232e134e85da7bf155ef74de2d504f04c8379255ef57c4189149253303d25713090b4bab248e2be30a506272cd585c567858a82053222021a24f57e3ccf664c90f6cc39be4332f4c75416833562378c1dc49a31eb0a69f8e6a00d0c7993fe73877b7eb8d75860717b6951fdf77e56261c1916c90b29f7") 23:15:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) sendmmsg$inet6(r2, &(0x7f0000002bc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x3ff, @local, 0x2330851}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000001c0)="ed970c1871e476f15ef9e4d8d11fe3387007deeb17ef0e72685640953722a35c5c3b12f16076c5160493a97ff215b75b4557bd22d8f7c4764278b3701c545b6634f8de025bbcbfafb10e9ffac15d0e54309472f5f98282dac52cc7db88b151b55738705f8b68465209963111dae045ba3cbd1f7767b0e07be8", 0x79}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="9db4d3e8a0ca48d0656709a342adf64997eda62527f7da45e3a105a2eef1daa9e3ca3a34b0077f38e6b2c0e8c13eb79e0ed4d28988fb573ab17fb683815bd9ae98d896881307542a6f881e1404ba63a871d758f9fd15689fb5a2865250ccc3c91f48aba80d62a8dafed600d78d939782fb1f719708803fd8097fea8bc5c14319b874f9a8d25e0128b224ba6843eeab2529af7c36105535e8cbb78370de67b120ec6a4945824c3f754319098510a09dd400aafdaaaa", 0xb5}, {&(0x7f0000001300)="898313db36f2b9b407d34509d87a2065dec07f89b85ec5b5dad3c558c879bbeb7197b9da0f07df5c763288dff39a587e1d35fa6084bdfefa325d1b340d2703e82df47b9ac3f8381805acf37412003b71eabe79c36c27f934ba82d7a3a4a27eec91c7ab0d188b4235d16bc8d2c957876f69ad55ec3ea5276f6b94b8116f07311289c1383ca8d16ded826e9bdc50393ec9914af944ef68eefe1b80166c15ab389ef8421ef5765e43163d76525cdf83e7f063e965749f270e6e3adc847a12d350", 0xbf}, {&(0x7f00000013c0)="6665debafd3c37edec67e3853e2a580692ed1df9ceed355a878817d49e995d038a51ecac8410968711d72f5a0ba1f9", 0x2f}, {&(0x7f0000001400)}, {&(0x7f0000001440)="a21d453663616254affeaa8d2aa09d53628dcb04dd721a8fded081ace57b5971b92b62bc0aa9ca5fd50a05754d3585393dc9577a5851e8b2ce2a793abb9d4d7b2877cfd8d1632f23bcb902ca4b5c0a5276eca4892bf0615a8b1b5706bf9a9ec222369dd477dd3b2cb1b12e141863563808ae1d484a3c92220064b9642b0fd4038dbc9a4ddefa67ca72c227c4e4bd4921d2fdee3bc775662a7569", 0x9a}], 0x7, &(0x7f0000001580)=[@flowinfo={{0x14, 0x29, 0xb, 0x100}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="be8d1a613a9cec7ce44291136729", 0xe}], 0x2, &(0x7f0000002640)=[@dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, [], [@enc_lim={0x4, 0x1, 0x5000000000000000}, @enc_lim={0x4, 0x1, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dstopts={{0x170, 0x29, 0x37, {0x89, 0x2a, [], [@ra={0x5, 0x2, 0xac1}, @calipso={0x7, 0x18, {0x6, 0x4, 0x8, 0x16, [0x5, 0xce5]}}, @generic={0x6, 0xc9, "dc31f3c2413f702e5643259aa3deac42ec61501a3f1b772b3eb809938328bded9c7453b39e28e706287db4a009cbbad31f3d0eaef8a1306d4260e49fc2621831e59cea74f0301f69eb4386401eb5c7bd6e1dbeb224e4a7d9e15b82570032361bf7b12f2c26047aa8cfb464d4df71c9970a0e01416f46b4dd197f18c861de7b5ea39b08c3ed95b8f8471adcc8477f2885222c180f7d3ae313d6302d0e0ad27ad02d5db2c73b08d8d9118fb035bf14a0ccd202758bf9b7aca122d4147d64f0d8fdc2be9003c3f0be3b81"}, @jumbo={0xc2, 0x4, 0x80000000}, @calipso={0x7, 0x20, {0x51fa, 0x6, 0x1, 0x100, [0x1, 0x2, 0x1]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0xf11a, [0x1f, 0x9, 0x9, 0x3ff, 0x5, 0x8, 0x7]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}], 0x258}}, {{&(0x7f00000028c0)={0xa, 0x4e24, 0x4, @rand_addr="ed0afdef1a4ace51d8952efc18af88a9"}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000002900)="6902ae0ebc35a81623d067df5bc1bc9d7e39f42004efd151c113d96938b24edfeeb7879856a47d7748108326abc82a5d616d19c51dffee68d48a4ccf860f0a8c5fb90427ff37e2141208b6ee0c47d3f58d8f1d9019bf3f10bc8ee951911d117d21b59bb927f900641c286434eeea63d023b50eda1cc7ad052b0b6d2ead5e46f78b8ef6c688e349d687e40aae208e55c8b9012d40af467689908c6908cb2e80815e8166a44719cb45ef20b2654f2776833a54c6fd409373fb609c9a60f82020a3805307776802a0ddcde7ca3d3998638990d89e2992071763bf0869b635739a", 0xdf}, {&(0x7f0000002a00)="5ac7fd20e6943a76fc617d7fa1c1e4d6106e50ce85ea8c3bfe03e289a7cd298c66c880192c44d890b2d62bd821620ec045d4a9601455590f32b8fa9adc34c9", 0x3f}], 0x2, &(0x7f0000002a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x2, 0x1c, [], [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xfffffffffffffff7}, @hao={0xc9, 0x10, @rand_addr="069aba26364477402af64bfc8a671dec"}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0x4, 0xa0, "e719f2762cb33f197db7218b25f16a008d066bc9fb273766765d3118ae3c3527a27ea52864cea675f29bf4fff0d2a8d28fcf63725ca91023be9ec838db8f325a4eb919f05abeea1bcf0737595a6f1116d9062d6c11c22227f148de23255d29db7aa4844cf9225b2a64bb11dede01d81bd731cbf7cd1acdbda6856c2225be20bbf17fbd341edae286acbaa27f1b92335d181b6ca26c55653af58d34f63e514916"}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x130}}], 0x3, 0x54) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e05cfda7bf070") keyctl$describe(0x6, r0, 0x0, 0x0) 23:15:10 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x400000007, &(0x7f0000000080)={0x0, 0x0, 0x3f}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)) 23:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) 23:15:10 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x800, 0x3) accept(0xffffffffffffffff, &(0x7f00000003c0)=@can={0x1d, 0x0}, &(0x7f0000000300)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) write$smack_current(r3, &(0x7f00000002c0)='\x00', 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0193f010000000000fca0d9"], 0x60}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0xfc) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0xffffffff) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = getpgrp(r7) fcntl$setownex(r6, 0xf, &(0x7f0000000200)={0x3, r8}) exit(0x20) writev(0xffffffffffffffff, 0x0, 0x0) connect$packet(r1, &(0x7f0000000100)={0x11, 0x5, r0, 0x1, 0x2, 0x6, @random="2b41ce5a94a3"}, 0x14) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:15:10 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000ac0)='sostemcgroup', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xfffffffffffffeca) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='pstore\x00', 0x0, 0x0) 23:15:11 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8001}, 0xffffffffffffff9d) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='Uid_\xedap\x00\x1c\x1f\x99\xd84zs\xe8#\xca\x18\x1a\xf3\xb6\xf0}\xce\x8f\xff\x94\xa4\xcb\xfa\xefa0\xc8h\xcfk\t\xa2\xc8\x1d\xe5\xf7\xf5\xb0\xb3\x9a\xa8\xc7z\xcb!\x04]\x12\x82hT{Fi\x02X') r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x40, 0x3, 0x1}}, 0x14) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) accept$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r14 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r14, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r14, 0x0, 0x20, 0x7) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x11, 0x800000003, 0x0) bind(r17, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r16, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r18}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r19 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r19, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r19, 0x0, 0x20, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket(0x11, 0x800000003, 0x0) bind(r22, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r22, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r21, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r23}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r24 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r24, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r24, 0x0, 0x20, 0x7) getsockopt$inet_mreqn(r24, 0x0, 0x20, &(0x7f0000000680)={@initdev, @initdev, 0x0}, &(0x7f00000006c0)=0xc) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x11, 0x800000003, 0x0) bind(r27, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r26, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r28}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket(0x11, 0x800000003, 0x0) bind(r30, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r30, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r29, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r31}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r32 = socket$nl_route(0x10, 0x3, 0x0) r33 = socket(0x11, 0x800000003, 0x0) bind(r33, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r33, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r32, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r34}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000940)={@dev, @initdev, 0x0}, &(0x7f0000000980)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000009c0)={@empty, @loopback, 0x0}, &(0x7f0000000a00)=0xc) r38 = socket$nl_route(0x10, 0x3, 0x0) r39 = socket(0x11, 0x800000003, 0x0) bind(r39, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r39, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r38, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r40}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r41 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r41, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r41, 0x0, 0x20, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r41, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000b40)=0xe8) r43 = socket$nl_route(0x10, 0x3, 0x0) r44 = socket(0x11, 0x800000003, 0x0) bind(r44, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r44, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r43, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r45}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000b80)={@empty, 0x0}, &(0x7f0000000bc0)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000000c00)=@hci={0x1f, 0x0}, &(0x7f0000000c80)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x24, &(0x7f0000000cc0)={@rand_addr, 0x0}, &(0x7f0000000d00)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000d40)={@empty, @multicast1, 0x0}, &(0x7f0000000d80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000ec0)=0xe8) r51 = socket$nl_route(0x10, 0x3, 0x0) r52 = socket(0x11, 0x800000003, 0x0) bind(r52, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r52, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r51, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r53}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r54 = socket$nl_route(0x10, 0x3, 0x0) r55 = socket(0x11, 0x800000003, 0x0) bind(r55, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r55, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r54, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r56}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r57 = socket$nl_route(0x10, 0x3, 0x0) r58 = socket(0x11, 0x800000003, 0x0) bind(r58, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r58, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r57, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r59}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r60 = socket$nl_route(0x10, 0x3, 0x0) r61 = socket(0x11, 0x800000003, 0x0) bind(r61, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r61, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r60, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r62}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r63 = socket$nl_route(0x10, 0x3, 0x0) r64 = socket(0x11, 0x800000003, 0x0) bind(r64, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r64, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r63, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r65}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r66 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r66, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r66, 0x0, 0x20, 0x7) getsockopt$inet_mreqn(r66, 0x0, 0x20, &(0x7f0000000f00)={@dev, @loopback, 0x0}, &(0x7f0000000f40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001140)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000001240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000001380)=0x1a2) r70 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r70, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r70, 0x0, 0x20, 0x7) getsockname$packet(r70, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000002140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1d001f5a0f002b2e}, 0xc, &(0x7f0000002100)={&(0x7f00000015c0)={0xb38, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x25c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x52bff127}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xd570, 0x8000, 0x80000000, 0x800}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3, 0x54, 0x4, 0x5}, {0x7, 0x3, 0x400, 0x6}, {0x8, 0xffffffffffffff80, 0xffffffff, 0x9}, {0x7, 0xffffffffffffffe0, 0x6, 0x6}, {0x2279, 0x100, 0x0, 0x372}, {0x1, 0x8, 0x1000, 0x8}, {0x0, 0x2, 0x26c, 0x22}, {0x6, 0x9, 0x100, 0x10001}]}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}]}}, {{0x8, 0x1, r25}, {0xc0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r28}, {0x220, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7, 0x4, 0x5, 0x7}, {0x8, 0x0, 0x9, 0x23b}, {0xfff, 0xff, 0x630}, {0x400, 0x1, 0x7f34a047, 0x6}, {0xfffffffffffffbff, 0x5, 0x20, 0x3ff}, {0x9, 0x9, 0x95, 0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r37}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r40}, {0x160, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x9, 0xfffffe0000000000, 0x3ff, 0x5}, {0x9, 0x8, 0x80, 0x5475}, {0x1, 0x18, 0xac8, 0x4}, {0xfffffffffffffe00, 0x80000000, 0x100, 0x3}, {0x7f, 0x7f, 0x6, 0x7}, {0x3, 0x3b, 0x8, 0x100000001}, {0x20, 0x6, 0x7, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r42}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r45}}}]}}, {{0x8, 0x1, r46}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r47}, {0x1c4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r48}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r49}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r50}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r53}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x37}}, {0x8, 0x6, r56}}}]}}, {{0x8, 0x1, r59}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r62}}}]}}, {{0x8, 0x1, r65}, {0x1bc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r67}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r68}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r69}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r71}}, {0x8}}}]}}]}, 0xb38}, 0x1, 0x0, 0x0, 0x6058840}, 0x4000) r72 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) sendfile(r72, r4, 0x0, 0x20) 23:15:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001c00)="11dca5055e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 23:15:11 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3801, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3201]}}}}}}}}, 0x0) [ 364.134384] binder: 14024:14027 ioctl 54a0 0 returned -22 23:15:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003100800418e00000004fcff", 0x58}], 0x1) 23:15:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x100000001}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1b, 0x0) 23:15:11 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) [ 364.233621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:11 executing program 0: madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:15:11 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0008004500008100000000002f9178ac1414aae0000001b600908000000000"], 0x0) [ 364.331627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:11 executing program 3: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) 23:15:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:scanner_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xfff}, 0x59) 23:15:11 executing program 4: 23:15:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 23:15:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8000000000001, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f00000013c0)="89", 0x1}], 0x1) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="16feb80b9810406abe526876a72a36c952172a70ef1f283692c39daef099ace5bbcef10024bd98e2fb1a02458217e119fdbc3a5393dfbcfa77b20c8f0fa1e243805187b53dbdc459a856ee9bbfeea1fcfbe5a1cdc1b83c77a01a56350f37abff8cd4881fffe20b84babacd4ec039697d8c1c70e7c9b5ecc2309eef1affea6460f16c85a300007b30662fde6fcb3b0c3043e752c91e068dd266ab3beef4896daf955b"], 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000180)) 23:15:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f0000000140)) 23:15:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x41d, 0x0) 23:15:11 executing program 4: 23:15:11 executing program 2: 23:15:11 executing program 5: 23:15:11 executing program 4: 23:15:11 executing program 3: 23:15:11 executing program 2: 23:15:11 executing program 5: 23:15:11 executing program 4: 23:15:11 executing program 2: 23:15:11 executing program 5: [ 364.844913] binder: 14087:14088 ioctl 54a0 0 returned -22 23:15:12 executing program 5: 23:15:12 executing program 4: 23:15:12 executing program 2: 23:15:12 executing program 0: 23:15:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003030800418e00000004fcff", 0x58}], 0x1) 23:15:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1=0xac14140d}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x54}}, 0x0) 23:15:12 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000200)) 23:15:12 executing program 5: 23:15:12 executing program 4: 23:15:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:12 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x20006, 0x0, 0x0, 0xffffffffffffffff}]}) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) 23:15:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000002240), &(0x7f0000000000)=0x11d4aa717184891f) 23:15:12 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x80000001, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 23:15:12 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x100000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x400) [ 365.748686] binder: 14108:14112 ioctl 54a0 0 returned -22 [ 365.762821] binder: 14106:14111 ioctl 54a0 0 returned -22 [ 365.889605] binder: BINDER_SET_CONTEXT_MGR already set [ 365.916955] binder: 14106:14125 ioctl 4018620d 20000100 returned -16 23:15:13 executing program 0: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x101000, 0x0) read(r0, &(0x7f0000000040)=""/68, 0x44) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0, 0xfea5}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7704183f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) readv(r2, &(0x7f00000002c0), 0x18f) 23:15:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2bb4", 0x9}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1d4, 0x0, 0xffffffffffffffa5}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) prlimit64(r1, 0xd8c72de13c9102a3, &(0x7f0000000000)={0x3f, 0x80}, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) rt_sigreturn() tkill(r1, 0x10010000000039) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") 23:15:14 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000700aaaaaaaaaa0e0180c200000eaaaaaaaaaa000000000000ffaaaaaaaaaabb2aaaaaaaaabbaaaaaaaaaabb"]) umount2(&(0x7f0000000180)='./file0\x00', 0xa) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) sched_getparam(r4, &(0x7f0000000340)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0x80000008000000b) 23:15:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030304134303030302c757365f21369643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x471, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3ff, 0x0, 0x0, 0x80000000000003, 0x82, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) umount2(&(0x7f0000000300)='./file0\x00', 0x3) 23:15:14 executing program 0: r0 = socket$inet(0x10, 0x5, 0x4000) sendmsg(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000001180), 0x32d}, 0x20000000) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="3f2025bc876e74e0b8d44abb5cc2cb6d6911110afce4f3f00b640af25c16d76f86daebd31c75ad1a1f172b0df02b28fc7e65b94df24d811f569b6b46e41b050418fb5d5473f560b41b46ef339b59113fc1b563745da6f431c0707e14eee04f39eb8fa9e9ad3df868cd838c46e9968593f4ed88684886ea678f38b392eee168f5c8f0fb0efaf1d32b9d383f08f6acefdc972dbf62d40caed0594bf45feb995e770b1483fec5", 0xa5}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="b089719b9b550186d8a99d0aac99ff70a29a573bf1d8b2b89f9311c7fa59038bcb9e6014bde65a09b8a1cc46981a48c1e3e5ea5fe82dc7852eb29412", 0x3c}], 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}, 0x4) 23:15:14 executing program 4: r0 = socket$inet6(0xa, 0x20000000000002, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/180, 0xb4) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x40) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x160}, {}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0xff}, 0xa, @in, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socket$inet6(0xa, 0xc, 0xfffffffffffffc01) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x2, 0x0) 23:15:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x60000000) inotify_rm_watch(0xffffffffffffffff, r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34}) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x410) read$char_usb(r1, 0x0, 0x0) 23:15:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x6) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xfffffffffffffff7) r3 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)) 23:15:14 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xa8715b85c6079b36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x4000003, 0xc0e) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioprio_get$pid(0x1, r2) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40023) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x102, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) pselect6(0x40, &(0x7f0000000440)={0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/user\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000240)) fallocate(r0, 0x0, 0x0, 0x110001) write$binfmt_elf64(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001480)={'veth1_to_bridge\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) r6 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x42d4e98378d39a7d) close(r6) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000480)="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") open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 23:15:14 executing program 2: socket$packet(0x11, 0x6, 0x300) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000003) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) renameat(0xffffffffffffffff, 0x0, r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0xb663e9a8ee16b74c, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xd0400, 0x0) fcntl$setown(r3, 0x8, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x1000003) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffd, 0x9, 0x100000000, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x20}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='sysfs\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x0, 0x0, r6}, 0x5d) socket$unix(0x1, 0x1, 0x0) symlink(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000100)='./file0\x00') 23:15:14 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX], 0x0, 0x4d}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0x7530}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x2a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000500)={0x3}, 0x4) accept$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x19b) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) utimensat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x7530}}, 0x200) 23:15:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst]}, &(0x7f0000003ff6)='G\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe6d) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddr={0x84, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8001, 0xfd34, 0x8}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0xfffffffffffff801, 0x20, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddr={0x84, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8001, 0xfd34, 0x8}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0xfffffffffffff801, 0x20, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddr={0x84, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x8001, 0xfd34, 0x8}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0xfffffffffffff801, 0x20, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="840000001400050200000000000000000a0000001192c5030e92d08061a272662923e4b90a0e42f2c4720c9f3509eb7d591a7f504b8a331dba52f2a0b82a", @ANYRES32=r10, @ANYBLOB="14000100fe8000000000000000000000000000aa14000600050000000180000034fd00000800000014000200fe8000000000000000000000000000aa14000100fe8000000000000000000000000000aa140006000900000001f8ffff20000000060000000800080000040000"], 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) poll(&(0x7f0000000180)=[{r3, 0x14}, {r5, 0x200}, {r7, 0x40}, {r1, 0x8200}, {r0, 0x9}, {r9, 0x800}, {r2, 0x20}, {r1, 0xa200}], 0x8, 0xdf10) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fstat(r1, &(0x7f00000003c0)) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0)=0x100000000, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x800002, 0x300) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) syz_genetlink_get_family_id$ipvs(&(0x7f0000001840)='IPVS\x00') 23:15:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x2) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x5, 0x1) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)='caif0\x00', 0x6, 0x0) poll(0x0, 0x0, 0xffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000180)="d353ff072d68b2e4dc14aa5fa8b3d94c22") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) [ 367.271174] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.283146] binder: 14188:14190 ioctl 54a0 0 returned -22 23:15:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 367.621807] binder: 14211:14212 ioctl 54a0 0 returned -22 23:15:15 executing program 4: fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_getparam(0x0, &(0x7f0000000140)) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000040)='gfs2\x00', 0x394c030, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='./file0\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x4, 0x3c) connect$inet6(r1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)}, 0xc100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000540)="08bbe715f4ac9a69f1a035a694d07b0358e12f6bd555aaf3c236db492f7a81e92ba7d5006f5e21909bdeb426c92cef4ceb1425f7ba6f0ab8c6950a37effeae8856341ba2a74eed2792f7ff308ef045e6cccd9cadf1713932a0b496794a8e61c67d91ed0b90f2c7403ac961b8732566e3c28ce5f5a7cdf569e040d18746d4ff2b051bb0b68d6585acdf97893afa4311e4a4c4d9f7d98ffe38a27dce45aa4773480088baf006f65baa4adf3bc4fcdef0d670bcb8bfd3e2348ee607e851319462877551963dbe475992324fa79c2b1d746ab4bba893c485f9c2f0e2e09aa8") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x13\x00 \x00\x00\x00\x03\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x98) unlink(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 23:15:15 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) symlinkat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r1 = open(&(0x7f0000000240)='./file0/file0\x00', 0x101000, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x14) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$P9_RMKDIR(r5, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x10, 0x2, 0x3}}, 0x14) fsetxattr$security_smack_transmute(r3, &(0x7f0000000100)='seCurit].SMA\x161\xd7\xdaTRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0xfecb, 0x1) poll(&(0x7f0000000040)=[{r2, 0xca0bbe3df6c6bc58}, {r1, 0x20}, {r3, 0x64a0}, {0xffffffffffffffff, 0x8284}, {r4, 0x1}], 0x5, 0x3) symlinkat(&(0x7f00000004c0)='./file0\x00', r5, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = creat(&(0x7f0000000340)='./file0\x00', 0xe987cb9bf23ce7dd) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) write$P9_RREAD(r7, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="103e80a40c1e335fcb903c4f8bc0bac4e581b1a2a2732b9458d1843e0df1854b041df32b0fc417001b70aa4e5131a32ee949c296206dc30d6fe79704a695971f8fa4b0f28c64db11f9c874b6ff03e19212e84cfe180e85cbf2026bee37486ecc33c55a249670ddc4beb5797665e6ef55e865ea4b44448f56a152d7e833f38602db27583ae59940c79a2115b64efec0e5ba706069a9789d3b020591b6348f545abaeca70f62dc62a6a54bb5014f9fe0655f52907ed0f233a06f8345a1088da79f76c6547391c443d3154c0a7fe293b4067096d2ad7198adb5c170ab9b89210a4641cab330f53c2abfcb2392ad36b190f16eb62f4a95d2f9350b", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB="5cd2d496006aa3fbc1d05b1dae7aacfddb9aca0a20418dbe90369b03aa1d300f76f57b0924ba8b078d2baf4633574fe4757d3499d966c507714073a911"], @ANYRESOCT=r6, @ANYRES32=r8], 0x124) sync_file_range(r7, 0x0, 0x20, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x2) mkdirat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000380)='./file0/file0\x00', 0x20000, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffffffffffe, 0x20, 0x7) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000000)='./file0\x00', 0x0) 23:15:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=""/137, &(0x7f0000000000)=0x89) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x16) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000000000031, 0xffffffffffffffff, 0x0) 23:15:15 executing program 3: pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x857, &(0x7f00000001c0)=0x0) r3 = memfd_create(&(0x7f0000000540)='\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(r3, 0xe, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = dup(0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000004c0)='syzkaller\x00', 0x0, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b56330310bd231ab71100478bdb87363ec2f26bd6c2bfbc9460bb6923e8", 0x3e, 0xfffffffffffffffd) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x800fe) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe) io_submit(r2, 0xcb69fa3119203e6, &(0x7f0000001700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x100000, r0, &(0x7f0000000380)="88be16b430ff63b703646018617029399e315a2b515f1493b5258aecf370615f6868f40508d143e52809134c650f33b182d66439fc5cc341d5d7a98115dbbf37e23ad7cd49220a1eec93efdc301981f836413da339dc2d9f064d3f10d7e6cb8a4c3a9ecea9a0bde17507167b4fc8a1d76d1284c55655d6d3208ee16f3b2980878f8e44250fe21fb7e8dce98e7cb4d7c4ebfc83dd66c5b1b727deadee7231663198fac003cdfe0ce09934fdea1ece7330d26452e7e7deb8f34655b5c81ac0", 0xbe, 0x0, 0x0, 0x3, r4}]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r8, r7, 0x0, 0x1f7) tee(r6, r1, 0x8, 0x0) [ 368.234602] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1e0101ac1414bb0000080000ac1414bb000000030000006900000008b37fd7c4677cee77aec2d042f7617f"], 0x2c) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b0a00f4afd7030a7c", 0xfefc, 0x0, 0x0, 0x1d4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x658, 0x7}}, 0x30) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x2000, &(0x7f00000001c0)=@un=@file={0x1, './file0\x00'}, 0x80) 23:15:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:16 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) flistxattr(r1, &(0x7f0000000040)=""/26, 0x1a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r0, 0x2000000) [ 369.336418] binder: 14263:14266 ioctl 54a0 0 returned -22 23:15:17 executing program 0: clone(0x4041c0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x17, &(0x7f00000001c0)) ptrace(0x4206, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000000)={0x0}) 23:15:17 executing program 2: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40c00) write$FUSE_WRITE(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) 23:15:17 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000603000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000200)=0x10) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$nbd(r4, &(0x7f0000000300)={0x67446698, 0x1, 0x0, 0x4, 0x2, "a60236158b4f0d29f25f8178aab0fb98c725bb1c64cbd677f023b957ddf5b201c22dd00a4562425a993b8d47b8e91395738258055abf298ba936a91025215e03fb19a38e5535b9e3bdaed0a115a4cf2b0dbccb98d5a9260dbd711c6ca4c1fb547182de66ecb1263cea1e84fa903ccf49524533836843c6de151bc94741f551bbfe2fde6e1b0241d58cba5103dcd2665aba8d18f8"}, 0xa4) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) 23:15:17 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x8000001000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/486], 0x28}}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0) 23:15:17 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="953a4df392bfd6702f4d787c6242b414a6c8e95716e567a2c705e6fb3024263565c8d3daa12f29") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x1, 0x20002000004) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) prctl$PR_MCE_KILL_GET(0x22) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140), 0x4) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000300)={0x0, {0x100000001, 0x0, 0x1, 0x4, 0x2, 0x40}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x3, 0x16a, 0x3}, 0x50000000000000, 0x49, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x8, 0xfffffffffffffffd, 0xfff}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x2b}) socketpair$unix(0x1, 0xfffffffffffffffa, 0x0, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0x0, 0x3, 0x1}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r3 = getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x200, 0x2, 0x20, 0xa0, 0x32, r2, r3}, {0x4, 0x8, 0xe99c, 0x0, 0x1, 0xffff, 0x0, 0x8}, {0x6, 0x100, 0xc4, 0x1}, 0x7f, 0x6e6bb9, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x20, 0x3, 0x9, 0x8}}, 0xe8) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = accept(r4, &(0x7f0000000040)=@caif=@rfm, &(0x7f0000000340)=0x80) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000003c0), &(0x7f0000000400)=0x40) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') 23:15:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) fcntl$addseals(r0, 0x409, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000140)={'system_u:object_r:setrans_initrc_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x5}, 0x6e) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) write$tun(r2, &(0x7f0000000300)={@void, @void, @llc={@llc={0x4e, 0xd4, '9$', "d7e7e6570916278a1611ab9fdea3b5e9ecadb9bb03f6b69f5ce0769bded2e367ccc1b54acdf1caaab22867338272cd7d7bcfccb4606d49b9c35f810d5f379cc79aa972ff61b58229af28e17b7efd915a9f36aae5590c879102fa2638d5bc7a02b5cc53f738f6635b08bebb5055df0fd46e7e0c89dc7f593a"}}}, 0x7c) write$P9_RREAD(r2, &(0x7f0000000240)={0x9d, 0x75, 0x2, {0x92, "31a9210bf91e4b3715d927a946606e147ae19de25b8e81b15b675f86681428aadc361f3c0ab78e1b2ddef1d331c9c88be058dd3bed5332bbecc53d1b9aa3f54c04142ee4f169a695e15ac12c3ab9a569c56e902650a0464c5c9ffee15366744b00706502199b94e16419f6ce0f5a396131e79e815473151f6398542ef525784dfc9793f525b18f622322ee9b4a3d3a7e6534"}}, 0x9d) getpgid(0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0xd635dd8ba7b457d4, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200)={0x9, 0x4}, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040)=0x758, 0x4) pipe2$9p(&(0x7f00000001c0), 0x81800) sendto$inet6(r1, &(0x7f0000000380)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0x30, 0x80, 0x0, 0x0) r6 = getgid() setgid(r6) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0x1000) [ 370.237532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.256271] binder: 14278:14284 ioctl 54a0 0 returned -22 23:15:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0xfffffffffffffea0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r0, 0x400000000000001) [ 370.330059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:17 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000640)='&sys\xdd\xb1m~[Z$\xd3\x9c\x82\xb3~xh\r\xca\xbf0\x99\xff\xa3Q<2\x87\xcb\x81\xe6!\xcd2\x15\\\xeeY\xeakT\xda#i\"K\xd1}\xae\x86\xdbr\xd0\x06L\xa65Y\xf9\xe3Dt\x03,\xeb\xa6\xc9\xe7\x1d\xd3\xbe<~K\x05\xb0$\x984^<\xb9\x1a\xe3\t\x13\xf8\xcbiE\a\x04\x17\xe7\xa3) \b\xb8\x92G\xb7\xb0\xc9\xc9]\v[\xf4\x1c\x84\xa28\xda\xe8H\x0e\xee \x82$B\xf9y\x92f\xd3a\x12H\x80\xc0W\xf9g\xe0\xf1\xa2\xaao\x16\xbaw\xb8^\xff\xcfdB\x8a\x19\xe1]\xa2\x17\x9f\x90n\x1a\xe8\xcb\x8a\x92)\xb3p\x02\x937c\xa79\xd1\xc0?\x8a\xa4\xb2\xc6\xbcQ9\xa4\xdf\x1e4\xe8X\xf3\x01#>\x95S\xb4\xd2\"\xba\x10\xb0\x97\x83\xceL\xe7\x8a\xe4#T\xbf\xc3\x10o@\x8bu\x1e$\xde\x7f\x03\xcd\xc2>\v\xda\x9e\x9d\x10j\x9d\xc4\xd0\xfb8L\xca\xb7-ws?\xfb\x81\x84\xac\xb7\xf2eD\x1c0`9\xed\x00\xb1\x1d/\'\xfc\f`\xd8\xb8P\x9c\x9e\xabTP\x0f\x9d\xff\xc5\x19d\xd0\xe3\x921\xd4\xfeM\xa31\xb3\xbe\x0eN\xb3\x861s\xb9*Ec\x80\xdd\x9f\x8c\x88Q\xe0.o5\xf8\xd6w\x16\xc8\xb6\x98\xf2\xd6qI\xd4\xaf!\xed~\xa6\x12H\xa7\x9f\xf5M\x12\xd0\xbcO\xceR\xc7\x95\x12s\xcf?\xd5\xb7a[g\x90\xd3\xc6\xda\xe9\xfb\x85Sz\xf5\xe5\x91\xd1!\xad<0\xde\xc6_ya\xd59z0\x9d \x8c\xc1\x80\xc0\x80\xc8\xcc\xf3\xf7\x06\xc0\x02{\xa7! \xd6\x81\xbf\xa7\x99\xb2+~\x87[\xced\xf75?/-+\r\xae\xa2\x02tZ\x8et\xf4Q5\x94\x1c\x1fG\xb53\x1c\x81\xbc\xcc\b\xe2\xbd\x1a\x9f\x8b\xd6\xacO>\xc4\x97\x0f\xe1N\xc9\x9e9\x1dK\xf5\xa5\xf8\xf3j\xa8\xcf[Y)\xee+\x80e,\xae\x9f\xae6\xf6}h\x8b\"R\x8a\xb8\xdb\x8f\x13\xc6\x19=E\x8b\x17\x97\xe0\x1eN7\x88e\xac\\6\xd3\xa0&A\xe9\xa7\xe7\xf26)\xe4e\x11\xb2\x11\xfb\xf7\xcd\xde9\x84%O\x00\xa3\x97\xbbM\\\xca\x90,\xb3\xcb_\xc9\xf9\xffKm\xbcu\x18\x19f %IF\xeb\xa5ePr\xf1l\xc8\xee\xfa)\f\xea8\xc0\xdc\xc3N\xe7jie\xbb\xe4z\xf0\xe9~\x8d\xf5\x81\xd4o\x7f*R&\x11vt\xb2\xd4\xe4\\\xc3\rg|\xaf\x1d\x11\x9e1\xda+\x85\xc3\xdc\xb8\x8avt\x92\xedOT\x19i\x89l\x89\xc7\x9b\x89\x1a\x8b\x03\xbd}Z~\x96Tk \xf3\x18\x8c\x16P\x8c\x1e\x1e\x9c.\xa4T\x03\xbf\x96\xa0-\xa1\xfa\xb3\x96\xf77\xfff\x8c\x9ae\xeb\xfd\x98\xda\xa2\xa1') 23:15:17 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 23:15:17 executing program 3: select(0x40, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, &(0x7f0000000880)={0x1, 0x3, 0xd4, 0x0, 0x9, 0x0, 0x0, 0xa0}, 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000404000001000000b7050000000000006a0a00fe000000008500000012000000b700000000af000095000000000000134e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280) write$cgroup_int(r2, &(0x7f00000000c0)=0x3, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x37) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000280)="dfb7f7b2dac202f43a9923383b56c6d9a6a6fe69b58a447fabdaf758cf5a8e2403ed09ff9caa21683abd9cb910690af5c9a1592c36fef73affefce7fcdc788e8af6d462089c13d75f9a3542e1213587c981e983fcda1047256ea7b00c3096322d07d6f9a3da68ed66f24f70568ec292d728d55eb70e743ce8eb103c2532793b30e86b0be9cdd9ecf1207443e71ba63cd3290948bf128c7", 0x97, 0x6, 0x0, 0x1, r2}, &(0x7f0000000380)) sendto$inet6(r3, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r3) write$cgroup_int(r2, &(0x7f00000003c0)=0x4, 0x12) r5 = accept4(r4, 0x0, 0x0, 0x0) poll(&(0x7f0000000400)=[{r1, 0x2108}, {r2, 0x4203}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x1}, {r3, 0x840a7e90b9466dbc}, {r0, 0x10}, {r5, 0x1009}], 0x8, 0x1) 23:15:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty}, 0x1c) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x102, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xfffffffeffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xdb641fcc105c6f3b}, 0x22044014) 23:15:18 executing program 2: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x4b, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)=""/75}, &(0x7f0000000040)=0x78) r1 = socket(0x200000000000011, 0x3, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:15:18 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x40, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000003c0)=ANY=[@ANYBLOB="330400005f64c83b2f6605d19f6efb0971d12137c5e73995dc2bff7204e6a17b"]) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000015c0)) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1942b229dc5e5588, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r3 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) mmap(&(0x7f0000e12000/0x4000)=nil, 0x4000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000064b000/0x3000)=nil) r4 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r4, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r5 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r5, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="57493088dedf282bfb1b64", 0xb, 0x7}, {&(0x7f0000000300)="94bb350cf380adec0a8e000def635773e615f087c389bf071dc70e2d79e5c00a5f824d710a3144009c59340681cee4e315b08af87137ea5d8d93f8bfb14ad5823a89c6699354", 0x46, 0x8000}], 0x10000, &(0x7f0000000700)={[{@uni_xlateno='uni_xlate=0'}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}], [{@uid_eq={'uid', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(r1, 0x0, 0xfffffffffffffece) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001600)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r8}) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000400)=0x1f) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xaaaaaaaaaaaab93, &(0x7f00000008c0), 0x4, &(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYPTR64, @ANYRES64, @ANYRES64=r9, @ANYBLOB="7d10d7184172b477b486f4df71fd8bd88962194354dd6e1411a00331fabdda6ff897004a6109f5874eb8435989b93c32044f991327034f35ead841578346fda9c3239261b59cf5c623c3564ddb2391ac448e62", @ANYRESDEC]], @ANYRES64=r3, @ANYPTR=&(0x7f0000000580)=ANY=[], @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYPTR64, @ANYRESDEC=r6, @ANYBLOB="ff27f7f17aeab131b282d4348f368854c50079a6f0706bc7c15b6c4ab1dc8b6a245a72f4053ca847261d95922d724ccb0c233813792d3d5584808dde542f6963368ed299bb7add3e479ad2dc91914b3c2094b3896984282de35a2a28f2ba9123eda57f35bea97a66fb2c8be1d58eaa", @ANYPTR, @ANYRESDEC=r2]]]) 23:15:18 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x0) write$binfmt_script(r0, &(0x7f00000016c0)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {0x20, './cgroup.net/syz1\x00'}, {}, {0x20, '!wlan1system'}, {0x20, '[vboxnet1em0:md5sum'}], 0xa, "a5acc8dc441caf8c0e0148d794af4cabdb91069498488be18d6958ed1f9511af83fd4a5a29be28b6af366f97251576308ab2ee33e624485c1bcbf87feb63a10901b2604df4df8750c6dc3f0a3081589f2af87f723a48ce15a78e463ac2bf18a8c6caee2c055bcfdb39c22c2a4da20ddb488996ef60e1b79d6b8349603a78e6d5447350b341cdbb060f7147f555f245685a98c7fe1753a9b36a70719c8d060841632bdb895a7a3015875e0cf02695c727"}, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(0x0, 0x33a8c68392ad93ce) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x40, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)=0x0) prlimit64(r3, 0xa, &(0x7f0000001800)={0x0, 0x871}, &(0x7f0000001840)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[@ANYRES16=r5], @ANYRESDEC=r1, @ANYRESHEX=r4, @ANYPTR]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400009) write$FUSE_INIT(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000440)='./file0\x00', 0x8, 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) write$cgroup_subtree(r4, &(0x7f0000001580)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYBLOB="b5f6bb9c3f2a41a5b755084ea9e4ecb7e6775a24087f2c79a621f58b620f9c53d47b0e4dd0dc100f0b96dcf990740abf43420941078119cc2881d3439ea6dd4c79f5b6412275d5a0060e234793f39a30b642958b46713a6342b28fa6245f7a46dfbe0727a6f06295d7d8129887c3fc7ab16c18c45b441ba77d940bc658c98405d5a5cee0efa88e86dbb29ccc711027fe9dd0cd8af29c41ab6d7eace1cdde6762", @ANYRES64=0x0, @ANYPTR64, @ANYPTR], 0xcc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00'}) getpeername(r4, &(0x7f0000000240)=@tipc, &(0x7f0000000340)=0x80) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) sendmmsg(r2, 0x0, 0x0, 0x20000000) 23:15:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 371.351733] FAT-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000004" or missing value [ 371.432669] FAT-fs (loop4): Unrecognized mount option "@" or missing value 23:15:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:18 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1e) clone(0x100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount$fuseblk(&(0x7f0000000340)='/\x00@\x00h\x83\xda\x1c\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x911007, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x400000000001f) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='/\x00@\x00h\x83\xda\x1c\x00', 0x9, 0x2) 23:15:18 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_mreq(r1, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote, r2}, 0x14) [ 371.719274] binder: 14367:14370 ioctl 54a0 0 returned -22 [ 372.040942] FAT-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000004" or missing value 23:15:19 executing program 2: socket$inet(0x10, 0x2, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00\x00type\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) rt_tgsigqueueinfo(r2, r4, 0x20, &(0x7f00000001c0)={0xb, 0xffffffff, 0x10}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000240)) vmsplice(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) getpeername(r1, &(0x7f00000002c0)=@isdn, &(0x7f0000000340)=0x80) r5 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$selinux_access(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x115) timer_create(0x7, &(0x7f0000000100)={0x0, 0xb, 0x0, @thr={&(0x7f0000000000)="149587a17f1835ee524b4e75f643aba3d31a930ee376ff15e99dee50c75c90cdc1f1119e34919449b5fab7fd0bc4770560c024e55464c248bf87d32f6508e98570b765784ad42e85b238976ea3a8620961705b211faaae83e98d71e3766175b739eb8604be8df1b54477937c6aa6", &(0x7f00000000c0)="24fb2af8cae89b6ad6a17d1360b9b670571d761949f5f007537e78c1ff668a1b529c540d0b0bbc7f254e92c54baa08cd"}}, &(0x7f0000000140)) 23:15:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x8) r1 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0x14, r1, 0xabfd71951da87948, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200400a0}, 0x24000000) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB='mode=00000000000000000002000,mode=00000000000000000000011,mode=00000000000000000000000,mode=000000000000000000000', @ANYRESDEC, @ANYBLOB=',fowner=', @ANYRESDEC, @ANYBLOB]) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001085, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000280)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="780000000000000017010000796e0000bcfb0ccccf48480a9060cf25543d1c00315c4b30530de49f584e06808e2dcbd0e363bbd20507820ce28a52ba4656ac39563d391ce10c6a71a4a52e51c57827425632e490703060159b00aeffabf1e9edc3abf3a8d018249d995cae507a51accb5790499edf2ebb5b"], 0x78}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=""/120, 0x78}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) dup3(r0, r3, 0x80000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) fallocate(r4, 0x0, 0x6, 0x5) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000ac0)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) getgroups(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3, 0x1, 0xfffffffffffffffd}, 0x14}}, 0x0) 23:15:19 executing program 0: keyctl$join(0x1, &(0x7f0000000800)={'syz', 0x0}) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x80, 0x0, 0x7}}, 0x14) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r1, 0x0, 0x115) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:15:20 executing program 2: clone(0x2007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b53c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="e6855c5d9eb82ee451010001ef5f02a6eb456ead5d0029a741efca44f937d0492440000000000000003897cc275fd8", @ANYBLOB="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"], 0x0, 0x105d, 0xffffffffffffffcc}, 0x20) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xb6c) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1400000002010731ec0800000000000000020000"], 0x14}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) dup2(r1, r2) 23:15:20 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000bc7000000000000095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001800)={0x14, 0x32, 0x1}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x408, 0x110, 0x0, 0x0, 0x0, 0x0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x4, &(0x7f0000000040), {[{{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0x0, 0x803d2d4eb9a5ef7d, 0x8f35f501a5c9fa22], [0xffffff00, 0x8c3e85803983dd8f, 0x100000100, 0x4a662e2158ff90c9], 'veth1_to_team\x00', 'ifb0\x00', {0x101}, {0xff}, 0x0, 0x7, 0x0, 0x10}, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x5, 0x4f4}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0x0, 0xffffffff], 'veth1\x00', 'netdevsim0\x00', {0xff}, {0x80}, 0x33, 0x7af5, 0x1}, 0x0, 0xc8, 0x108}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1907ddf9b6e002865cc4fe871c932c024919db3eea6f5807e3de6520df73"}}, {{@ipv6={@rand_addr="d5f3dbbbe6b3a7b419ecc7651d945ff8", @mcast1, [0x101, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0x1807ffffe, 0xff, 0xd81f485834bc5633], 'rose0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x89, 0x1, 0x1, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x100, 0x3, 0x3, 0xe, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x800, 0x8001, 0xa29}, {0x9, 0x200, 0x5}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) [ 373.018889] tc_ctl_action: received NO action attribs [ 373.044503] tc_ctl_action: received NO action attribs 23:15:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') exit(0x80000001) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x2}}, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x24, 0x5) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='batadv0\x00') socket$key(0xf, 0x3, 0x2) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x2, "259a402ff81b7a9d"}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) ioprio_get$uid(0x2, r3) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000140)=""/9) 23:15:20 executing program 3: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r1, 0x0, &(0x7f00000007c0)=0xff49) r2 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140110}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000810) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) unlink(&(0x7f00000001c0)='./file0\x00') clone(0x100010c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="13ffbd7001fcdbdf250c10001500000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) read$char_usb(r5, 0x0, 0x0) write$evdev(r5, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x9, 0x20}, {{0x0, 0x7530}, 0x16, 0x2, 0x3}, {{0x0, 0x2710}, 0x12, 0xd4e, 0x6}, {{}, 0x12, 0xffffffff, 0xf3}, {{0x77359400}, 0x12, 0x9, 0x100}, {{}, 0x3, 0x6, 0x3}], 0x90) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000380)={0x2, 0x6, 0x4e, 0x7, 0x5, 0x3}) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file1\x00') 23:15:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:20 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) write$eventfd(r1, &(0x7f0000000000)=0x3, 0x8) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 23:15:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000003e00)="0f8b6f114441", 0x6, 0x8000, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r2, 0x0, &(0x7f00000007c0)=0xff49) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r3, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xb0, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x74b1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb366}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc91}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffc01}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 373.416094] binder: 14420:14422 ioctl 54a0 0 returned -22 [ 373.596890] audit: type=1400 audit(1568070920.748:45): avc: denied { bind } for pid=14413 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 23:15:20 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000006c0)) r1 = dup(r0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000640)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000200)={0x5, 0x0, 0x5}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x753c55b8e35273af, &(0x7f00000002c0)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000004000000000412d1fbc0000c622bed1000000f9180200ef00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0193f010000000000fca0d9"], 0x54}}, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x5d5cc27be698bc03}, "c12ad31340cc89af", "dc5616e92713ac16f3db5a2199c999ebbbd3ca8fbf2f328387c46a038d6cfa78", "1dea22cb", "46f1bb2043678e69"}, 0x38) fsetxattr$trusted_overlay_opaque(r0, 0x0, &(0x7f0000000480)='y\x00', 0xfffffd54, 0x4) rt_sigpending(&(0x7f0000000140), 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 23:15:20 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x2) write(r0, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00002) sendfile(r0, r0, &(0x7f0000000040), 0xff7) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000003400)='./bus\x00') r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x214201) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7f, 0x7, 0x4}]}) 23:15:21 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80), 0x0, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0xc3a, 0x0, 0x0, 0x1, 0x3f, 0x10001, 0xe55}, 0x0, &(0x7f0000000140)={0x0, 0x800, 0x2, 0x9, 0x3, 0xfff, 0x7, 0xc59e}, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000002000)={'filter\x00'}, &(0x7f0000002080)=0x78) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000002b40), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, 0x0, 0x40fdf) 23:15:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800, 0x0) fcntl$notify(r0, 0x402, 0xc5966abdd72c7e1d) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) syz_open_procfs(r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = accept(r4, 0x0, &(0x7f0000000140)) fsetxattr$security_ima(r5, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0xb, 0x2, 0x1, 0x2, 0x17, "3dd7851833fd158634705e359acd5f2840a850fba99190"}, 0x21, 0x0) getrusage(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000700), 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=0x0) syz_open_procfs(r6, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x8}, 0x28, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, 0x0) 23:15:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000001c0)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @ipv4={[], [], @loopback}}, 0x15) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x221, 0x0, 0x0, 0x0, 0x80000001, &(0x7f0000000280)='bridge0\x00', 0x4, 0x0, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x8000}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x80) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f00000000c0)=""/133) 23:15:21 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8095, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$UI_DEV_DESTROY(r3, 0x5502) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) readahead(r4, 0x1000, 0x1) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @initdev}, &(0x7f00000002c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 23:15:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:21 executing program 5: socket(0xa, 0x800, 0x0) 23:15:21 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfe50, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3d2aa0c27959361ae"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="e6c57c669e382eec5101008ead6686bc0180437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc4c051be926a3c67ed333c960d2bc40dd887fc8dc4872b000100003ba62f5f37d4354f651d00000000f515586de3cd937a8c7c"], 0x0, 0x8c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)=""/218) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) readv(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400001900036ce60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 23:15:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="d3d2b93851c9804e9200"], 0xc}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91e7f1ffd7e4ab569f8e39808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b3"], 0x0, 0xcb}, 0x20) tkill(r1, 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x8) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x20) [ 374.527682] binder: 14471:14474 ioctl 54a0 0 returned -22 23:15:21 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x2, 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x36412db52659fc19, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) readlinkat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000600)=""/4096, 0x1000) r5 = dup2(r2, r3) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) [ 374.771769] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 23:15:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 374.815705] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 374.843157] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 374.880838] EXT4-fs error (device loop4): ext4_iget:4542: inode #2: comm syz-executor.4: root inode unallocated [ 374.892623] EXT4-fs (loop4): get root inode failed [ 374.898195] EXT4-fs (loop4): mount failed [ 374.932243] binder: 14507:14508 ioctl 54a0 0 returned -22 23:15:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod(&(0x7f00000001c0)='./bus\x00', 0x1008, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000340)) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0) write$FUSE_LSEEK(r2, &(0x7f00000003c0)={0x51, 0xdbf8c3e2c8d48d93, 0x7}, 0x18) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x84) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="e9d72e343332bd8871b612ef942162eaf91be4a0b52e8887938419c632c545ac3eacf9e065256823e226b2a0d3a6feae463326a2355702c0c87951333ed81dd75004b6083b8f3be251c33851b7c9e37d35900f1cf4fb3336d2a67f19310d78c3d8221bc866bf39359e42207d1790900fa7b6760cae54f7ebee", 0x79, 0xfffffffffffffffd) keyctl$clear(0x7, r4) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) splice(r3, 0x0, r5, 0x0, 0xffffffff, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) read$FUSE(r5, &(0x7f0000000640), 0xffffffef) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18}, 0x18) 23:15:22 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x40) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "0dfbdadbaca6942f", "ad3a6a83c7a885023b487f7c1aa1f47c", "caf1197e", "9a1d07b9c1d3c0b5"}, 0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000036c0)={{{@in6=@empty, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) r2 = socket(0x2, 0x803, 0xff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) pkey_alloc(0x0, 0x3) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@local, @loopback, 0x0, 0x1, [@loopback]}, 0x14) r3 = add_key(0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc) keyctl$reject(0x13, r3, 0x0, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f00000002c0)=0xfffffffffffffe2e) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000540)=""/223, 0xdf}], 0x2}, 0x1ff}, {{&(0x7f0000000840)=@vsock, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/84, 0x54}, 0x8001}], 0x3, 0x2362, &(0x7f0000003440)) getpid() socket$inet_udp(0x2, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 23:15:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/493], 0xfdef) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) sendmmsg$inet(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:15:22 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 23:15:22 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) gettid() ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x17642c1) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getresgid(&(0x7f0000000100), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000015) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="ae", 0x1}], 0x1, 0x0) 23:15:22 executing program 0: prctl$PR_CAPBSET_DROP(0x18, 0x20) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000580)=0x3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) socketpair(0x0, 0x800, 0x5, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x40, 0x0, 0x0, 0x0, 0xae, &(0x7f0000000400)='ip6_vti0\x00', 0x57, 0x7c0000000000000, 0x9}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$P9_RUNLINKAT(r1, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x400000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) io_setup(0x8000, &(0x7f0000000040)=0x0) io_getevents(r4, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)) r5 = socket$unix(0x1, 0x5, 0x0) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x486800, 0x1d4) io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x7, r5, &(0x7f00000001c0)="09a25641d9ffa9c123e822f13b95005808aa92844b426516ae2d82c43bc8634c4caaa3acfccd8762e047ea6a61759e51d9c3a010ca97df65203391837eabcec94569775ac04d98d8d8c57604cf7b5d7396ec30d939edca69eb2d9d2b9bb06f8c9caee0592ed39871f4d142fb9068f050bf9098c4b5389f22916c3a74f850e1234c168c0d9cba0f420386b68ae4c8c55fdedea1b9dd638d05becc5b703926825d45ee7971e4a0404e2e3a857e2b3a9896c15fdb0a203d30fe75f46089af2af4aef030e9d13f46304ea2585260cb83a8a52e58d2f3fbee71d326b57ba96127c5de2c29b39b54fe73f7b850c0873a7303271cf038ba", 0xf4, 0x9e40, 0x0, 0x1, r6}, &(0x7f0000000380)) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x6, 0x1000, 0x3ff, 0x6, 0x6}) init_module(&(0x7f0000000500)='IPVS\x00', 0x5, &(0x7f0000000540)='IPVS\x00') 23:15:22 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='./file0\x00') r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file0\x00') getsockname$unix(r1, &(0x7f0000000680), &(0x7f0000000380)=0x6e) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)='syz1\x00', 0x0) r3 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000005c0)="ceb48e4c533dc45a688d674f17c5795e552a8b77c06c7750f0034efff79c38f0c13074d0f0aa193022102008713863011e645b71c2e2c2ffb68c294c314b02d0d98ad7d2668ae77fb5f5163e32c526e45606997fa5f48f939e95883acbdaee3eb26811f6c7efae45209f5bd64391826602ed5379be79077877bff9cfe7983c76850fdcb64116882b2a89903147ddf10579f30e30bcb95972e53506078e0db4bb99ce45b1fe5a5da9c0150a786022bf58f5d8c6fb5fd85c777d043d", 0xbb, 0xfffffffffffffffc) request_key(0x0, 0x0, 0x0, r3) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000440)=0xff) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r6 = accept(r5, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010001}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x68, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20090000) gettid() stat(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) 23:15:22 executing program 5: creat(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x178, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000001e40)=""/131, 0x83}}], 0x1, 0x0, &(0x7f0000000ac0)) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, 0x0) r2 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000400)={0x5b, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8, {0x82, 0x3, 0x8}, 0x38300000, 0x0, 0x7, 0x0, 0x0, '', 0x0, '', 0x0, '', 0x6, '@wlan0'}, 0xd, 'net/fib_trie\x00', r1, r2, r3}}, 0x5b) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x3, 0x87b, 0x0, 0x9, 0x0, 0x5, 0x2001, 0x8, 0x0, 0x6, 0xe49, 0x100000001, 0xb84b, 0xdb, 0xfffffffffffffff8, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x7, 0x479d, 0x0, 0x3, 0x1, 0xffffffffffffffba, 0x4, 0x0, 0x7f, 0xfffffffffffffe00, 0x3, 0x1000, 0x1000, 0x0, 0x3, 0x639b, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xa87}, 0xc028, 0x10000, 0x54, 0x2, 0x112, 0x0, 0xffffffffffffffff}, 0x0, 0xe, r0, 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000080)=""/188) [ 375.704336] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 23:15:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 375.827110] binder: 14567:14568 ioctl 54a0 0 returned -22 23:15:24 executing program 3: setresgid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x189) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x81) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x21) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="00e82a") syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x6, 0x13, 0x0, &(0x7f0000000040)) r3 = gettid() r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) accept$inet6(r4, 0x0, &(0x7f0000000280)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r5 = getpgrp(r3) syz_open_procfs(r5, &(0x7f0000000240)='net/udplite\x00') unlink(&(0x7f0000000200)='./file0\x00') openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) 23:15:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fd\x00\xa9:\xb3t\xca\xbf\xa2\xe0\xf8\xfd\xfb\xb9\x12\xfcT\xf5\x80\xc0\x8f\xff\xc7\xfb\xee\"\xa1\xff\x87\x87x\xd9\x0f\xa7\xbe4o\xc0\x82\x98\x94\xe4\x9c\xaf\'_L\x05\x02-\xfd\b]\xbe\b\x00\xb9\xc7\xe6\\\x98\xec[V_\x04Q\x869\xfdk\xe1\xf5M\x93\xef\x1a\xfb\x9ad]l\x93\x11\xe6O\x19;7f\x99\x8b\xa6\x0e\xcc\x8dw\xa1\xdb\xbc\x93\xa6i\xc1Xu\\\xf2V \n\x1c\xa0pM\xec5\n,\xe9?\xce\xbf\xb2o\xd5`\xba\xf9\xff\xa3\x88\xbf\x1b,S>\x9d\x90\x9f\xfd\xbc\xbe6i\xe5 \x9b\xb6\x99\xbb\xee#?\x81D\xcf\xe14\xdc\xec\x9a\xb7\x00\xe6\xdc\x1a\x83\xc0&\xc95\xc6%\xa3\xb8\x82 y\xcf\xcfz\xd2\x88\xa2,y\xbaE\xc4\x81\xa4Fn\x8c\x8c\xa1\an\xdd\xc9_\xb9\x11o\xe64\xdd9\xfa\xf0\xa3\xc9\xd2A{?>\x1e\x0e\xce\x99\xaa\x17`*}\x84\x8b\x1a\xd3o\x1d\x97\x83\xaeN-\x19\x15\x9b(\xb9\b\xce\xe3V\xd3E\xee\f\"\xb0\x88\x86m\xcdq4\xc6\xa1\xca\xa64D\x84c\x1f\xb0w\b\xaaX\x98\xd1[\xc7k\x00\x11\x8e#\xd8\f\f\xe13S\xd9?5K<\x13\x91\xf1\x8a\xc8\x12\xc8\xe1\xbc\x88\xcan\xb2\x04\x18\"\xd1Lg\xd1\xdb\xd3}\xab\x06\xd5\xad\x19\x9aCs+\xb6F\xae\xa5jn\x8f\xae\xa5\x87`\x04=+\x8b,Gr\xfcuh`\xc0\xfe\xdb Z\"\"[\xd30S\xf2\xc7\xf2@\xd9{\x8b&7\x84n7SCf\xa9\\\x18g\r\xdd\xbe^\xb8\xd8\x03Fi^\xe5a/\xba\xe9{\xcc\xea\x7f\x84b\x01\xda\xa1\xee+\xd2\x89\x02\x9d\xb5e>\xbe\x15\'s\xb9^\xd6{\xdb\xa2\xb5\xd3\fdC1\xb6\xdf\v\xae\xa3\xff\xaf);W\xe0\xb9X\xcbv\x0e@\a\x10\xc38l\x82r(\x19\x80\xc6\x83\xefT\xd1Xz-\xf2\xef\x9a\x14\x03\x86\xe5\xcc\xba|+\xd8\xb4\xda\xf6\x9a') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) setresuid(0x0, r3, 0x0) fchdir(r1) 23:15:24 executing program 0: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 23:15:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0xe) fcntl$getown(r0, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe4eae0cee3d37ddd) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) 23:15:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r0) r1 = inotify_init() r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = fcntl$dupfd(r2, 0x203, r0) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) inotify_add_watch(r1, &(0x7f00000002c0)='.\x00', 0x1) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r4, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') getdents(r5, &(0x7f0000000140)=""/243, 0xffa1) 23:15:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x20000000080003, 0xc) write(r0, &(0x7f0000000080)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e976672b7254187d042055b95460c28297a8a1bc2972c52351c74e137e9fe39c981db68733ea4f44573890f02299fbcede2fd3f78188fcabfc7d9ebae3b6e166322241"], 0xfffffffffffffee8, 0x1) [ 377.588251] binder: 14600:14601 ioctl 54a0 0 returned -22 23:15:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = accept$unix(r1, &(0x7f0000000080), &(0x7f0000000140)=0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8020, &(0x7f0000000200)=ANY=[@ANYBLOB="6a6f75726e616c5f696f7072696f3d3078303030303030303030303030303030302c6772706a71756f74613d2e2f66696c65302c6e6f71756f74612c00effda1c39a0ae745de0ab37c67fbb80ea96e48c8618619ea62bee643315119be1798384e98a16f44"]) 23:15:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) sysinfo(0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) io_setup(0x0, 0x0) io_getevents(0x0, 0x0, 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000100)={0x0, 0x989680}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000704000/0x1000)=nil, 0x1000) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) munlockall() 23:15:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1100008912, &(0x7f0000000040)="11dca50d810bcfe47bf070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000008f139814a2b0c4c8f20040bf0b6511932bfa21a9ba547b5f6d349dab4f078f98b32e28a5e283d8a1719f06822ddc8af6113dbe129ca86ecd55927a3d6d4ee9a52d00"/85], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x401, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@local, {@in=@empty, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0xd}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc}]}, 0xffffffffffffffb3}, 0x8}, 0x8000) 23:15:24 executing program 0: r0 = epoll_create1(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = epoll_create1(0x0) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x100, 0xc0000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000004c0)={0x0, @aes128, 0x1, "71bc9eaf7a0d22c2"}) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_wait(r0, &(0x7f0000001980)=[{}], 0x1, 0xffffffffffff8001) open(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) r3 = epoll_create1(0x0) epoll_wait(r3, 0x0, 0x0, 0xffffffffffff8001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x9}) 23:15:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, 0x1c) r2 = socket$inet(0x2, 0x7, 0x1) flock(r2, 0x2) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000b67000), &(0x7f00000000c0)=0x19) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 23:15:25 executing program 4: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f00000000c0)=ANY=[], 0xffffffffffffffb2) sync_file_range(r1, 0x0, 0x1d, 0x7) dup3(r1, r0, 0xb199545102485b43) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4ac04e11}) 23:15:25 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000700), &(0x7f0000000740)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000780)=0x0) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000007c0)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000008c0)=0xe8) r8 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r11, r9, r10) sendmsg$netlink(r0, &(0x7f0000000940)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000180), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r10}}}], 0x40, 0x4}, 0x80000) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000180)={0x1, 0x40, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0xa, 0x0, [], [{0xfffffffffffffffe, 0x1f, 0x5, 0x100, 0x0, 0x6}, {0x2, 0x7, 0x2, 0x7fff, 0x9, 0x1526ecb2}], [[], [], [], [], [], [], [], [], [], []]}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000140)='proc\x00') 23:15:25 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a53000000000000fe803b9a1e39000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc77dd46e4c8db357bbe19e31b00"/400], 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000800)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x1f}}, {{0xa, 0x0, 0xfffffffffffffe01, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}}}}, 0x108) 23:15:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) r1 = getpid() r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0xfff, 0x6, 0x22, 0x9, 0x0, 0x6, 0x40, 0x9, 0x7ff, 0x6, 0xffffffffffff0000, 0xfffffffffffffffc, 0x0, 0x3, 0x1, 0x3, 0x400, 0x80000000, 0x7, 0x1, 0x7ff, 0x6, 0x57eab67d, 0x3, 0x0, 0x40, 0x8, 0x7fffffff, 0x8, 0xb95f, 0x6, 0xf48, 0xe27f, 0x200, 0x2, 0x0, 0x0, 0x6, 0xd, @perf_config_ext={0x2, 0x6}, 0x40000, 0xffff, 0x3, 0x0, 0x100, 0xffffffff, 0x1e}, r1, 0x4, r2, 0x2) [ 378.149627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 378.168461] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 378.192335] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 378.220140] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 378.254861] EXT4-fs error (device loop5): ext4_iget:4542: inode #2: comm syz-executor.5: root inode unallocated [ 378.272575] EXT4-fs (loop5): get root inode failed [ 378.284587] EXT4-fs (loop5): mount failed 23:15:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:25 executing program 0: openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r0, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) lseek(r4, 0x0, 0x2) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "cdf5594d896a3e7780dc98e7f4ac785ac738ecbc"}, 0x15, 0x1) sendfile(r4, 0xffffffffffffffff, 0x0, 0x40d09) 23:15:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x1a, 0x0, &(0x7f0000000000)) 23:15:25 executing program 5: r0 = socket(0xe, 0x4, 0xfffffffffffffffa) bind(r0, 0x0, 0x0) [ 378.465360] binder: 14656:14660 ioctl 54a0 0 returned -22 23:15:26 executing program 5: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r0) tkill(r0, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffff1}) 23:15:26 executing program 4: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x2, 0xe4, "bf3e88897a74d2a68c3d7e4df46c059413bc0727de15aff535e8890adfc3c7f7247aafd7559722a94b04aadb42c9451e1c5db8662b36bcb8ddda4529ea8a27e79a5f9e9c02226e6b9fcb771e300f5b396612957acf029647ae6e138910b69cf0b9f41f704689d1f07ea24dd0374e535e0f8dc1222669de644e9330ab39b741f0bc1b64a1ec79c3f78b06fded6c08fb17922b6a891fdd03e38a71097625cfef3f73eb16ec4aa81a1fcd3101a27f09cd4d85e12f635ae64442124d8e8ceaf24ef4ce767a070a7819dbd8cbfbc8d389e109eca95a4c71d80d9241b2bc70956b95821e71a2ae"}) clock_adjtime(0x0, &(0x7f00000004c0)={0x2, 0x2d, 0x0, 0x0, 0xfffffffffffffffc}) 23:15:26 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x80) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r3 = accept(r2, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3f, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246) close(r0) 23:15:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) munmap(&(0x7f000001d000/0x4000)=nil, 0x4000) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fallocate(r1, 0x12, 0x280, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)) ioctl$TCSETA(r2, 0x5406, 0x0) syz_open_pts(r2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 23:15:26 executing program 3: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/44) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'syzkaller1\x00', 0x4}, 0x18) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) 23:15:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:26 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000001440), &(0x7f00000014c0)=0x68) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f0000000140)='syzkaller\x00', 0x3b8, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x0, [], r4, 0x8, r1, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x81c, 0xfff}, 0x10}, 0x70) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r5) io_setup(0x8, &(0x7f0000000080)=0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) getpeername(r7, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000013c0)=0x80) connect$packet(r8, &(0x7f0000001400)={0x11, 0x17, 0x0, 0x1, 0x4}, 0x14) io_submit(r6, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0xfffffffffffffffe}]) [ 379.786941] binder: 14674:14680 ioctl 54a0 0 returned -22 23:15:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@ll={0x11, 0x2, r4, 0x1, 0x5, 0x6, @remote}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="73a026105cd862772eec9d2d95fc5dc8c1a441fbd205e797453ccd7f4d45833a3e8e524ffb37748eecd3fd8a23ee2061b2487066abe1d59e4a52", 0x3a}, {&(0x7f0000000140)="beb17e8342d48d36a97e7ae716928461ff6cd8144340e63afe00315f0b7f443a029735ceece36919c17af6c1678d081944944542778c0d9474a9913b4f78da2b0c2db34c7d765bf04c44ccf9b2a6daa9bfe4b333c0", 0x55}, {&(0x7f0000001540)="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", 0x1000}], 0x3, &(0x7f0000000200)=[{0xe8, 0x10a, 0x80000000, "60c33fe2b39a04b06d3a23c1a5e760e81519a8afde8489a5d1af35662c1eca6439b9a6f300631ded596321bd35ec34812f90904f84aafaf6d3c7585a6df4001ef158a9b15c3e96ead23bf493313fdf46b6f80b749a02038c50d06931517df01bd4e7758e2a856b443bb354d6453000f610d894f93d3619f655acd4d13cdc3588e793455d5a8a673b4dec6a29b25fb1fac9cbf7cd3b975c4df9428be1894171eb66aa53e3db441705c4da3bf5b9da86400e361268704d0d76aac4364c145858e044a922e80e08bffae5fa71df7c005e50c12f4cc0"}, {0x40, 0x10e, 0x5, "46dd772c896e106527f43123b29def4e4761fa5d1063727a66936655eb50b47f20d5d3d121d7657f99"}, {0x100, 0x1, 0x5, "ae3dfbf5dacadff3503fa0e5ed1fc3b017a29a1523f274e00f89b4750b4d93db797573887d1f83c604e149a426b74d8c0d8faebabcf38fa431d38c0f40163b45369717f9638b3b8166b091a8e13ef2c7c3f9241b864bc2363d7d501c22470d4573020727c787f7a5392c4b52ee23e3ef1a0d3579790100597017c813824471804827c9c491f342a5638054c68f697e6c536aa79e822564dab21e62072b08a28b91dd405b7e0196b4e9cc309222883826d47c872044815423986a6165e9d87b5d4013eba3a19a92c16fa3835439ae34161087fcb0843fb85ccd46c528fe2216f7179d74e12ee83339561710ac46ae7d08"}, {0xf0, 0x0, 0xa24, "0420761c272a5b9c8ad9577c946c9a867cdfa1832f72d9bc4503aed27992927f52c91379e05a1f6f394f48d265f1a81a2c8df5733bfb35e6248a91c9c3c58bd0fa2cb942520d33f25ad7c1aec509301577fe84194ab1fe14f875a428567909c9530c6f73d7a9a52b1d726ca3aa6fe68681c6eb67036a45b4e05ac7f7623787705274806992e07470d4c7b2cb85bd14a135ca29fa84075b7bc67d99f7b293a5d6207777c704aaa20e753543e36fdff847dc89012008c6c6c23c4909bf126092189911bbcdbabe393ad600f86aa63e9b71c00fa39d6e760bdce77e2b9856e3"}], 0x318}}, {{&(0x7f0000000540)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="ea88c14afa78b8f834ac0e744cd0ea3387bcb41a9806ccab52ccceb3422479a98d23ae425e2a2fe95682844a36f994cbeb47ac2c6216032870e094ac248ba2d86ff77e538289468113a15d02e6c1b4390914899e58e6b661c84d7975e17e42e661a3cc4e91a8d1a6a48aa365146e72407a05253b7f0e247cdd0749b4450d4399cd7a6bae0988fb9c190b2dfb2119b5bc7a62fb3b5ff08189c87a", 0x9a}], 0x1, &(0x7f0000000700)=[{0x18, 0xd1ebc0fc784effc7, 0x8000, "9b3edac6d3"}, {0x110, 0x84, 0x4, "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"}], 0x128}}], 0x2, 0x4000001) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000008c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0x9, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x557e1b87c2263522, 0x8, 0x6, 0x100, 0x8}, @jmp={0x5, 0x48c1ab33, 0x1, 0x3, 0x1f, 0xfffffffffffffff8, 0x1}, @alu={0x4, 0x266, 0x3, 0xb, 0x2, 0x40422536d2e6c7dc, 0x4}, @call={0x85, 0x0, 0x0, 0x15}, @ldst={0x3, 0x2, 0x3, 0x0, 0xa, 0xffffffffffffffc0, 0x10}, @generic={0x8, 0x1, 0xffffffffffff7fff, 0xffffffff, 0x2}]}, &(0x7f00000009c0)='syzkaller\x00', 0xffff, 0x6e, &(0x7f0000000a00)=""/110, 0x41000, 0x2, [], r4, 0x0, r5, 0x8, &(0x7f0000000a80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x3, 0x6, 0x6}, 0x10}, 0x70) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000c00)={'team0\x00', 0x400}) sync_file_range(r6, 0x0, 0x20, 0x7) write$binfmt_script(r6, &(0x7f0000000b80)={'#! ', './file0', [{0x20, 'ppp1-'}, {}, {0x20, 'mangle\x00'}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "cf4634540e62fed9085d9d3eb21d3cd70ef6ca9f8614467b6bac64bdff6a6bb11600ee3ca2d13a31cc2d100b04"}, 0x5d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:15:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x3}, 0x18) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x8) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x70, 0x80, 0x62a, 0x9, 0xbf, 0x0, 0x2, 0x48000, 0x2, 0x80000000, 0x5, 0x0, 0x8, 0x6, 0x3, 0x1, 0x6, 0x7, 0x7ff, 0x6, 0xfff, 0x1, 0x8000, 0x54, 0xfffe00, 0x0, 0x1, 0x1, 0xffffffff, 0x5, 0xffffffff00000000, 0x8, 0x6, 0x3f, 0x3, 0x3, 0x5, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000200), 0xf}, 0x2424, 0x6, 0xd64, 0xa, 0x1, 0x200000000000007f, 0x3}, r1, 0x8, r0, 0x8) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7ffffc, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000)) 23:15:27 executing program 5: r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x410003) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x2}) [ 379.883977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.899041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ftruncate(r2, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000180)={0x7f, 0x0, 0x1ff}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x0, 0x9}]}, 0xc, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001200192340834b80040d8c5602067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @dev, 0x5}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') sendfile(r5, r6, 0x0, 0x8607) r7 = open(&(0x7f0000000280)='./file0\x00', 0x4000, 0x50) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, &(0x7f0000000180)) r8 = socket$netlink(0x10, 0x3, 0xa) fcntl$dupfd(r8, 0x0, r8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x110, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x59}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2f7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa24}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x6, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x110}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x52801000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="79bf5b46", @ANYRES16=r9, @ANYBLOB="10002bbd7000050000000f00000008000600c00e00000c00010008000200210000000c000200080006000004000004000200080005000180000058000100080006006f766600080008000300000014000300e0000002000000000000000000000000080009006300000008000800000000000800050003000000080002003b000000080004004e23000008000b0073697000"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4040850) 23:15:27 executing program 2: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/104) r0 = socket(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x20}) ioctl(r0, 0x8936, 0x0) [ 380.704213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000040101c910f0018e1ebc204b44dbf5be26ec3600600000000000000000000000000001000000bb36017655c3fb08961f4b700c0388c19ebf2a60b24f10ff2c205a6a91e03e9e547147ddb422d9522cd652218987d399ab8381ae963ac6a94b04c2f6a3640c631da48ba33f7e0b58eabb6c44fbc9e7b835d328a1d248e7fb0f5f518114dd2a5fb8b61989f04373d2677d38e1aeeb6bf3f869622f310b9ebcdb36529629790a85c0205bc3c9aeb50d26a758b0e7daa8d9961c2fb96c8fd1f66577e1a86df2fe1605036cddff3fedd9adb0127b8941b6446d7d72f36fc1e006f2e14edbdc86086504717a7e6e9e2332091f8f8d83811d486e07a9cbef5487cc26daf1fff9526514c807e9ea912aa5b2994bcd51a7eeeff615195f45976904fc54627fff47aa2c91035fab36532b330f6c07e9350741a7211c21795153950f9da853128ba20a6542a85ecd32bbcfb27f864e7d4b8cd9c349b33323bcec412b9ad491952624d8e10a0099f803138250d0fa3d3dc8c8dcb28974191fee9d328d4a1f724ef2f6c772d57af2d2fe26e2527539156d13d84f619eb1ccfc4be68e4c3c7c613386b8abfb7f77b234071a62f9a7e6fece57eb702f66a59d41d68313cff16b7de4d560620a57cdbf9f58729920ad4379338ebd1ad45138320ac97488564ffca67a84b2f743912e196cf77c0057e7980867bbb1fda9b844753b714fd8af1f03cabdf06e5d0a9595446e61ab06d50e1224a2765e4da41980853d3d0d683a9ebc7b270dd56b675ad4f171b79b0000000000000004d02db537c3f01dd982e620cd823743fcb34182c40d12728c2f6aa438401ab6babc8921dfd0bd0a89a37c291971f32ffffe6c976d8d81f85a649751439e65c53dac3e792d9730f72bd872a8607fc200309785c5a036489e497c41559e325b34a445a70c21bbf05ecb8c67227f415820cd59fc12ca09015dbb52aaa913efe1e0fc1665c270b675606a711881094b34ba9e63e8456350aff48e51d3cd7fbd494e523cb90140af019e74031a26cb761ce20f65c3d12fb3db7de81f37fbbbc00559f4308e9051daaf62e0ce7439c376e3e735f1778ffd62786833f0d84d08f0aa733d995d251719b6d0934aab36ccdab1299e4134675dd98381d80cdf16703cb41b08d934daeb445de29148c12cc3f7ec6bce4c74aa000000000000000000000000000000a8688a09d5a790d8e2cc8b83656eab6443aa94c76d44928a6e09"], 0x20) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 380.824583] binder: 14716:14718 ioctl 54a0 0 returned -22 23:15:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0xec7b, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r3 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x4, {0x6, 0x1000, 0x0, {0x5, 0x3f, 0xe87e, 0x8000, 0x4, 0x80000001, 0xa0af, 0x7fffffff, 0x479259f8, 0x40, 0x3, r3, r5, 0x76, 0xfd0}}}, 0x78) 23:15:28 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffda1, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) fsetxattr$security_smack_entry(r5, &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)=',vmnet1\x00', 0x8, 0x2) getegid() pread64(r3, &(0x7f0000000200)=""/21, 0x15, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r6) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000140)={'caif0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}) 23:15:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r1, &(0x7f0000000480), &(0x7f00000004c0)=""/50}, 0x18) 23:15:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) ioctl$TCSBRK(r0, 0x5409, 0x0) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/145, 0x91}], 0x1, 0x4a) 23:15:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = geteuid() r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1076f8b6d761250d84dc6874b169bcd70441c98aece5659c401de94fc5ae8f90234cb1f7987b6d283086b32956c18d3079342f9acfb5357d1fbbc6e528fcd578efb7c00b041735bb1393e4b785522612ed05a9032068434e5c34ede0f6a4dd4990557b1976ca625bf7caee0600a6603d71cd20e88ed076eb19c4c0f1bf9fafa890930e1ff45c1dc2b4b10521ede417e70570561ee4fd326fff90be110bd3f63cb0f20b08b5fd55446e64d097264d8bf9dfc210f7185b27b1f63c9b208287069f33a0be91355775c2b7", @ANYRES16=r4, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r4, 0x2a34d8cc4e7b19b0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe5}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0xa9, 0xa, 0x60, 0x72ce59e6b5f16546, 0x2c, 0x0, r3}, {0x9, 0x9, 0x8001, 0x0, 0x2, 0x400, 0x5, 0x6}, {0x2, 0x7, 0x80, 0x5}, 0x5, 0x6e6bc0, 0x2, 0x2, 0x3, 0x3}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@rand_addr=0x6, 0x3504, 0x3, 0x6, 0x6, 0x7, 0x1, 0xfffffffffffffffb}}, 0xe8) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x6, 0x1, 0x7, 0xc4b, 0x2, 0x7f, 0x400}, 0x6ee34f4fec083687) getsockopt$sock_int(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000005f40)=0xc) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) dup3(r6, r7, 0x80000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000440}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1a0, 0x0, 0x601, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0xb45c}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @remote, 0xfffffffffffffe00}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x243}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7b000000000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40060}, 0x15840) 23:15:28 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) ptrace$pokeuser(0x6, 0x0, 0x7fe, 0x2) ioctl(r1, 0x8912, &(0x7f00000008c0)="f59e131e79f154a7d8171700400892ac23a823df9a188cde74d4a3379c26e9b94a664c6d4b7c7f2f7c807f5604e9f25fa7138c150b99b2eee500086426593d107ca2923a9447ac9bbe11e112c02106e636c510c7cd19c23efc691bb6b74fd01ce3d482cc82596cb35afd36aab53f0becccd9467d6ed52e1f46871defe59a2bb2bd838b39bb55dc87db8add86369a9880766feed61cb6083493927e964c7e7ed0e3570d76e4752b53c92d6888ac12f003402ce08acab246541c36622e935c58d9b8cffb1735c98505cb6e1896445a7d74") remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x4) setxattr$security_selinux(&(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25, 0x3) rmdir(&(0x7f0000000640)='./bus\x00') r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT], @ANYPTR64=&(0x7f0000000dc0)=ANY=[], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC], @ANYRES32=r0], 0xfcb9) mkdir(&(0x7f0000000280)='./bus\x00', 0x21) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x1}, 0x8) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000fc0)="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") r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) getpid() r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000005c0)=0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x3, r10}) shutdown(r2, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x28}, 0x0, 0x1000000000, 0x1, 0x3, 0x3b9}, 0x20) socket$inet6(0xa, 0x6, 0x10001) connect$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r11 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') fsetxattr$security_selinux(r11, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:v4l_device_t:s0\x00', 0xffffff95, 0x3) sendfile(r6, r11, &(0x7f00000000c0)=0x202, 0x8) socket$inet_udp(0x2, 0x2, 0x0) 23:15:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 381.716784] binder: 14758:14759 ioctl 54a0 0 returned -22 23:15:29 executing program 3: syz_open_dev$rtc(&(0x7f0000000380)='/dev/rtc#\x00', 0x5, 0x10000) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x200000000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = open(0xfffffffffffffffe, 0x141042, 0x20000000000) r2 = open(&(0x7f0000000200)='./bus\x00', 0x8040, 0x32) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000300)=0x41b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xffffffffffffffff) rmdir(&(0x7f00000006c0)='./file0\x00') socket$inet6(0xa, 0x1, 0xfffdffffffffffff) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x4) setxattr$security_selinux(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000540)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25, 0x3) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x21) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000fc0)="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") r5 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000140)=0x54) socket$inet6(0xa, 0xa, 0x400) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0x40f8, @mcast2, 0x800000000000800}, 0x3c3) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000001c0)=0x202, 0x8) 23:15:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:29 executing program 5: write$selinux_create(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x3, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x408, &(0x7f0000000900)={[{@fat=@uid={'uid'}}, {@fat=@tz_utc='tz=UTC'}, {@nodots='nodots'}], [{@euid_gt={'euid>'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<'}}]}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x10) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x100000000, 0x9, 0x7, 0x3, 0x0, 0x8, 0x80, 0x1, 0x100, 0x804, 0x200, 0xfff, 0x5, 0x4, 0x200, 0x7f, 0x100000000, 0x1, 0x8, 0xcf86, 0x7, 0x6, 0xfb84, 0x40, 0xac, 0x100, 0x3, 0x99, 0xfb6, 0xc8, 0x4, 0x7, 0x1, 0x9, 0x8, 0x4, 0x0, 0x3051, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x10, 0x44, 0x6, 0xe, 0x8000, 0x8, 0x1f}, 0xffffffffffffffff, 0x0, r0, 0x2) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) dup3(r1, r2, 0x80000) 23:15:29 executing program 0: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) r0 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r0, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r2 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r2, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r3 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x121b004, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0xfffffffffffffff7}}, {@mode={'mode', 0x3d, 0x7}}], [{@uid_lt={'uid<', r0}}, {@fowner_gt={'fowner>', r1}}, {@uid_lt={'uid<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 382.173750] binder: 14777:14779 ioctl 54a0 0 returned -22 23:15:29 executing program 4: getitimer(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = socket(0x200000000000011, 0x3, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0xb0034a7f36ead47f, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x400040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in6=@empty}}, {{@in=@multicast2}}}, &(0x7f0000000240)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) socket$inet(0x10, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r4 = socket$inet(0x10, 0x0, 0x0) sendmsg(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 23:15:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000002c0)=""/209, 0xd1, 0x40012103, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x24020400) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) getdents64(r1, &(0x7f0000000040)=""/148, 0x94) 23:15:29 executing program 0: creat(&(0x7f0000000380)='./file0\x00', 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={0x8}, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0xab, &(0x7f0000000140)="12523be75e9ec3f5bc9fa2c8c384c0e8cb1885c9d3f3d3ecea83ef4391b1ce2d082d8a631031de645b352e351fdccd3b289db3c461749c3ffb39edcd9c9f3e120641f4ad3a11caef9fe3367a3e1e5182cddea36b4b26d41e822a9a67126be25cd5d0c4b31b3b11edef1d86a03e5c95bd70504e3bd83cbbbdeb83c8f00924fd8cd8ed6aa1b310476317ac1e4ae8cd587b4406bf4a03920a3b0c71d67833894fb46ef5bfde0700691032caf5", 0x88, 0x0, &(0x7f0000000200)="9f590a50c86c6137723a6d33edd4c9fb3849d593231adc42177b5f19ccac0c2e4c6d1abcdf0be29462583ae6432211f31e634bbe9d16eee0aed15f089f77add731ef385a6e5f265e2e4b48d222a6a17cc73fe35964ccf76d5284cd584c74353a8ff3a5310cf92e29caf5f0d03405d48c71f111e64266a2b411ddfda63edfcb4eab7247681e951a31"}) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$char_usb(r2, &(0x7f00000000c0), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uhid\x00', 0x1004, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0400f8"], 0x3, 0x2) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 23:15:29 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x6, 0x3]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom(r4, &(0x7f0000000040)=""/88, 0x58, 0x40012103, 0x0, 0x0) 23:15:29 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x22620a4, &(0x7f0000000200)={[{@lazytime='lazytime'}]}) 23:15:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a00f142433901e700000000a3a20404ff7e", 0x24}], 0x1}, 0x20000000) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000020307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1, 0x0, 0x1ef}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x115a) 23:15:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:29 executing program 4: set_thread_area(&(0x7f0000000000)={0x6, 0xffffffffdffff7ff, 0x4000, 0x800, 0x6f9c, 0x73fd, 0x9, 0x6, 0x1, 0x5}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') r1 = add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="9c6ea6f148aea896806de030d89157f91ae229df0c41d4bbf26d245599bcd25b4327f3", 0x23, 0xfffffffffffffffb) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=',:}\x00', r1) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x378, 0x100, 0x2, 0xfffffffffffff4c4, 0x0, 0x7f0000000000000, 0x24, 0x0, 0x7, 0x2, 0x7ff, 0x7, 0xd695, 0x8, 0xbbcb, 0x7, 0x8, 0xfffffffffffffffb, 0x1ff, 0x3, 0x6, 0x1, 0x7, 0x45ada487, 0x5f5, 0x480, 0x1000, 0xfff, 0x898, 0x8, 0x0, 0x100000001, 0xc3, 0xffffffffffffffff, 0xffffffffffffffe1, 0x7, 0x0, 0x9, 0x3, @perf_config_ext={0x8, 0x6b607107}, 0x810, 0x800, 0xc2, 0x5, 0x5, 0x8, 0x5099}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x63d4c7dfb51a0435) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x80000) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'rxrpc_s\x00'}, {0x20, ',cpuseteth1vmnet0{/'}, {0x20, ',:}\x00'}, {0x20, 'posix_acl_access^'}, {0x20, 'rxrpc_s\x00'}, {0x20, 'security'}, {0x20, 'syz'}, {0x20, 'mime_type-(selfmime_typeposix_acl_accessvboxnet0mime_typetrusted'}, {0x20, 'rxrpc_s\x00'}], 0xa, "0387e17340c8804374ea318eb51131b5a3b75a2090289aeb28dab96d4d83a94ea7c51b1d78f0fac56cdcb323ff16053898773164584d02612f2a057628c92a4803dde682cd889375ede49d8581e0197835de75325de90aa70bf55abcd6da1e5259cf5424241f86e601a6153002abeb1ede239f4179b54aacde13dd3f9b9663252c72d557cccd4a6eb40e5933f7ae2fc5fc8c0ca89c1ba970885f783d0d0d7f2cfed78facb1dddfb06c12e8b6c470a700a36236ad496f50bbef290d4010129ad34563733b6e7dd3c7c6666dc022f55433c9ea0ddda8d5dbdf40ef81cb4584c6be21d463fbd42e6eff7da1a9c3afb48e"}, 0x18e) arch_prctl$ARCH_GET_CPUID(0x1011) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x22c80, 0x0) ioctl$void(r4, 0xc0045878) epoll_create(0x7f) recvfrom$unix(r2, &(0x7f0000000500)=""/217, 0xd9, 0x1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_CAPBSET_DROP(0x18, 0x19) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000680)=0x20002004) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r4) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000006c0)=0x3) sched_setparam(0x0, &(0x7f0000000700)=0x7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x4e24, 0x9, @local, 0x8000}, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x29}, 0x6, [0x2, 0x1e, 0x80, 0xffff, 0x7, 0x401, 0x6, 0x7]}, 0x5c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/loop-control\x00', 0x174581, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r6, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r7) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000980)='/dev/full\x00', 0x80, 0x0) bind$packet(r8, &(0x7f00000009c0)={0x11, 0x8, 0x0, 0x1, 0x100, 0x6, @local}, 0x14) setxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', ',:}\x00'}, &(0x7f0000000a80)=',:}\x00', 0x4, 0x2) chdir(&(0x7f0000000ac0)='./file0\x00') [ 382.488369] FAT-fs (loop5): Unrecognized mount option "euid>00000000000000000000" or missing value [ 382.504028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.538823] binder: 14809:14812 ioctl 54a0 0 returned -22 [ 382.679481] FAT-fs (loop5): Unrecognized mount option "euid>00000000000000000000" or missing value 23:15:30 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='`F\xb4CxrP\x89\xd5\xdb:\x17\xee\xd4\x167\x14@', 0x180869f, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) open(&(0x7f00000000c0)='./file2\x00', 0x42102, 0x1) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file2\x00') 23:15:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) accept4(r1, 0x0, 0x0, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x2, 0x300) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ptrace(0x4206, r2) ptrace$cont(0xd, r2, 0x0, 0x0) 23:15:30 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) seccomp(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x5, 0xff, 0x3, 0x15e}]}) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = dup2(r0, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r3, 0x12) 23:15:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) flock(r1, 0x2) flock(r2, 0x2) get_thread_area(&(0x7f0000000100)={0x101, 0x20000000, 0x4000, 0x80000001, 0x5, 0x8001, 0x2, 0x3, 0x100, 0x9}) chmod(&(0x7f0000000200)='./file0\x00', 0x22) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x800, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = dup2(r4, r3) dup3(r5, r1, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000001c0)) 23:15:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000014000d070000000000000000026000006648108ce97ee6f353bb312c979487cdfca8dbb5c26a27b52dcb9a8bb85636c81e30fd73f2affef8c1b219f5e9eea154d5cc2a27e9806583f8322359fb1dd8244f65d2e214c41f55faa284d16d52bcaa257f5b0300000000000000fa5f5c6ab2a3d302a0a7c7a7a1b52d0c3b8a1db6ff1ff735b3b55a444486c4807b254bcf186b68ffd87723eaddca4f77455d5a1a", @ANYRES32=0x0], 0x18}}, 0x0) 23:15:30 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x2c, 0x37, 0x2, {0x1, 0x3, 0x3, r4, 0xe, 'trusted:system'}}, 0x2c) wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d6bff19c19d9cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRES32, @ANYBLOB="11c4cc8bdfc91f95c514cd7d1ee174e6687514fc4ad6579a92a7132fd92fc80b17bd1e8997e9319846bcdffe36f3ad753aafc6bdb3de00b213c62297d219883d681d67803079924310090144704eddfc1bb8443ad3d2ca7fbb8c2011a4aeae9873ad2e4db3a6444251545e1dbf8c0b9527aa88bafa552157df2d682439f8a25e9d89d3cad0de4eebcdd5f18b3a46f3de74954eff16ea5580a64a233654dea1a3d39b6a29292591fb281f146334ebf8f81a0aed9d323ad2aabba7df2bb02c92c0018d2a47a6c94a90bd0440652646e4acfcaf9e262eb62137e50dc748c34ce9efee", @ANYBLOB="e6c55c669eb82eec5101e632ff0000000000000004227280437a74620100000000000000ca44f937d0492400ba837296d961244e2e0c734057548c402cc43b3897cc275fd8"], 0x0, 0x144}, 0x20) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:30 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f601000800000007000000402c11000000000009000007000000000000000000000000385a58000000000000000000000000000001000000000000000000fa0000000060000000000009a1e5"], 0x2ab) [ 383.288543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 23:15:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:30 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x94, r3, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xfffffffffffffd9e, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0xffffff15, 0x3, 0x200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r4 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) eventfd2(0x5, 0x80001) 23:15:30 executing program 0: getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getgroups(0x294, &(0x7f0000000100)=[r0]) setregid(0x0, 0x0) 23:15:30 executing program 2: r0 = getpgrp(0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x804423, 0x80) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000080)=""/215) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x88, @loopback, 0x4e24, 0x1, 'fo\x00', 0x20, 0xd5f4, 0x25}, {@rand_addr=0xb, 0x4e23, 0x0, 0x4, 0x6, 0x8}}, 0x44) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 23:15:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x8, 0x6d, 0x3, 0x1, 0x0}, 0x2f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x10) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ftruncate(0xffffffffffffffff, 0x700) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 23:15:30 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ebc000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r2, 0x203ffffd, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r3, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r10 = dup2(r9, r8) sendmsg$netlink(r10, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYRESOCT, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYPTR, @ANYPTR64], @ANYRESHEX]], 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000000000)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/134, 0x86}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000500)=""/131, 0x83}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002880)=""/65, 0x41}, {&(0x7f0000002900)=""/255, 0x2e}, {&(0x7f0000002a00)=""/248, 0xf8}, {&(0x7f00000007c0)=""/55, 0x37}], 0x7, &(0x7f0000002b80)=""/7, 0x7}, 0x7}, {{&(0x7f0000002bc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c40)=""/82, 0x52}], 0x1}, 0x1}, {{&(0x7f0000002e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002e80)}, 0xffffffff}, {{&(0x7f0000002f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005480)=""/205, 0xcd}, {0x0}, {&(0x7f0000005700)=""/154, 0x9a}, {&(0x7f00000057c0)=""/87, 0x57}, {&(0x7f0000005840)=""/47, 0x2f}], 0x5, &(0x7f0000005940)=""/109, 0x6d}, 0x81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006100)=""/94, 0x5e}}], 0x8, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) [ 383.586783] binder: 14875:14878 ioctl 54a0 0 returned -22 23:15:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd1d, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b80ca0aa1c0009b3ebea8653b1cc7e6397", 0x16b}], 0x1, 0x0, 0xe6}, 0x80) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000080)) exit_group(0x80) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 23:15:31 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffce4, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001040), 0x4) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)=0x1) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @multicast1}}}, 0x88) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 23:15:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0xbc, 0xe4, &(0x7f0000000300)="fa21740596a469f80915cf0333ba12678e75f62a913a949efb5c8651ebb4754467646da56beb2cc67ff12e42139a85849484600f372735e92f727f0a92963e11ed52f3c63a697e04bdeaa1eb21dcc5d42e9526699e115502a3d30eb604910095b861fa481abe39ac5eaad269a50c2b789b80d1ff0085b2c9d9f78500eeae7e08fb588e7f763c11471446441fdab530b62bd98d4fb5bd1700f9ed4b09dcc452ec4ab47c35285d31987c04af6686a4dc010a8794e521fd26a1356ed0de", &(0x7f00000003c0)=""/228, 0x7}, 0x28) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) fsetxattr$security_smack_entry(r2, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x400, 0x9, 0x1, 0x81, 0x6, [{0x9fa, 0x7, 0x4, 0x0, 0x0, 0x80}, {0x400000000000000, 0x6e96, 0x6, 0x0, 0x0, 0xa54567d3eece9c21}, {0x9, 0x4, 0x6a41, 0x0, 0x0, 0x1001}, {0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2000}, {0xb9d4, 0x80, 0x81, 0x0, 0x0, 0x802}, {0x0, 0x857, 0x80, 0x0, 0x0, 0x1004}]}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x2, 0x0) 23:15:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x219, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, 0x0, 0x1}, [@policy_type={0xc}]}, 0x5c}}, 0x10000) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) 23:15:31 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) socket$inet(0x10, 0x3, 0xfffffffffffffffe) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000000c0)={0x3, 0xfffffffffffffffe}) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000500)="fbaeeb4a928db3771f7af48038b58105", 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002680)=""/190, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x19c) clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40286608, &(0x7f0000000000)=0xfff) lsetxattr$security_evm(&(0x7f00000023c0)='./bus\x00', &(0x7f0000002400)='security.evm\x00', &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x1, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x1, 0x6, 0x9, 0x40, 0x2}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000004c0)=0xc) perf_event_open(&(0x7f0000000540)={0x6028d43e6075a678, 0x70, 0xf58, 0x5, 0x7f, 0x1, 0x0, 0x7cb, 0x4b4895921358da21, 0xb, 0x800, 0x7, 0x6, 0x800, 0xfff, 0x7b, 0x1229a00000, 0x7f, 0x40, 0x3, 0x8, 0x0, 0x8, 0x3, 0x803, 0x7f, 0xffff, 0x10000, 0x5, 0x800, 0x3, 0x8, 0x400, 0x98e1, 0xffff, 0x9, 0xfd, 0x80000001, 0x0, 0x1, 0x5, @perf_config_ext={0x3, 0x9}, 0x80, 0x54, 0x5, 0x7, 0x6, 0x4, 0x7}, r4, 0xd, r0, 0x7) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10003fffc}, 0xc, &(0x7f00000001c0)={&(0x7f0000002740)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x4, 0x400, 0x3f, 0xfffffffffffffffd, 0xf4}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 23:15:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:31 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20400, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x49, [], 0x48, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/73}, &(0x7f0000000240)=0x3894ff5eae9ca47c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x4, 0x0}, 0x0, 0x0, 0x3, 0x3}, 0x14) [ 384.481574] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 4095 (only 16 groups) 23:15:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x2}, @in=@multicast1=0xe0000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xb8}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000000c0)=""/216, &(0x7f0000000040)=0xd8) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r3, 0x0, &(0x7f00000007c0)=0xff49) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x3e69a6251d679a78, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x4000000) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x3, 0x44d, 0x4f0f, 0x6, 0x0, 0x0, 0x80004, 0x5, 0x8, 0x7, 0x1, 0x2e, 0x6000000000000, 0x2, 0x4, 0x7, 0x4, 0x401, 0x8, 0x9, 0x99, 0x4, 0x5, 0x7, 0x200, 0xd6, 0x5, 0x5, 0x0, 0x4, 0xffffffffffff6bcc, 0x7, 0x3, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x80000001}, r2, 0x8, 0xffffffffffffffff, 0x9) 23:15:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e24, 0x5b788fe0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000f61000), 0x353, 0x2040, 0x0) 23:15:31 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) link(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./bus\x00') listen(r1, 0x37) close(r0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) [ 384.567574] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 4095 (only 16 groups) [ 384.672306] binder: 14930:14932 ioctl 54a0 0 returned -22 23:15:31 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x3c, @rand_addr=0x80e8, 0x4e23, 0x0, 'nq\x00', 0x8, 0x20, 0x1d}, 0x2c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r6 = accept(r5, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10010014}, 0x8100) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) write$P9_RREAD(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYRESOCT, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRES32]], 0x279) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000000c0)={0xf86, 0x9, 0x14f7, 0x1ff, 0xe85f, 0x4000000000000000}) sync_file_range(r3, 0x0, 0x20, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r10, 0x0, 0x0) 23:15:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x10100, 0x0) read(r0, &(0x7f0000000040)=""/104, 0x68) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x81, 0x7fff, 0x9, 0x2a, 0xffffffffffffffff, 0xffffffff, [], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x3c) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x821, 0x1, 0x6, 0x1, 0x9a5}) r2 = socket(0x5, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x66f27502a38eff4, 0x5, 0x100000001, 0x61, 0x3b9b30a6b2cb7485, 0x1, 0x80, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) flistxattr(r3, &(0x7f00000001c0)=""/133, 0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000380)=@buf={0xa3, &(0x7f00000002c0)="2e1bccde92f724a7048b38b12f045e6afc9b9b1f61e4fa55f369fa4995dd527c3cf1a80a77a390f8c562572e52c3c57868f18d15818470e9aac8372f654ad041e53aa5d1884a733ceaf7754a60084038953b5e9f53ee6bb6424051d077dd2819bb0e130d80d5805a0ca7637d690100067a802228e1e3c0beb212ffe1e674b2a44acbd726781c6a34cd978ecc3853afb8d5f989d9e2a00613a00c9f1fa0e0e8bc3943db"}) syz_mount_image$vfat(&(0x7f00000003c0)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x40, 0x2, &(0x7f0000000540)=[{&(0x7f0000000440)="f483e9956bf9ed5b54ea9f2a2aa387664ce1252fd8cc60009ce7d2bc7b1c00e42df61a9cf949deb765e7d6f8f912f6d4d0f0b186da5d3fcb96947ab343780df2794c7dab77aed7fe86cb4327f2f5a452de5c8ff5bca0c851b7f5589d1c66d6bb574911f2b9086dda8d35f7e6014a01a505c1fc5f7afde06b9203f4b1abc2878a948815ab45ebd1d07d25b1fea33bc580b34771d5f5", 0x95, 0x9}, {&(0x7f0000000500)="5df948753ff3c53ed7ca7123f1ecdde45adf279bae792111105371", 0x1b, 0x800}], 0x2000001, &(0x7f0000000580)={[{@utf8no='utf8=0'}, {@shortname_winnt='shortname=winnt'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlateno='uni_xlate=0'}, {@fat=@discard='discard'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_appraise='dont_appraise'}]}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000600), 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000640)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/status\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000006c0)='./file0\x00', 0x20) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vga_arbiter\x00', 0x62000, 0x0) readlinkat(r7, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=""/113, 0x71) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup(r9, &(0x7f00000008c0)='syz0\x00', 0x200002, 0x0) connect$inet6(r9, &(0x7f0000000900)={0xa, 0x4e20, 0x5, @local, 0x7ff}, 0x1c) mkdir(&(0x7f0000000940)='./file0\x00', 0x0) r10 = open(&(0x7f0000000980)='./file0\x00', 0x20000, 0x90) ioctl$RTC_AIE_ON(r10, 0x7001) prctl$PR_GET_NAME(0x10, &(0x7f00000009c0)=""/86) openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/uinput\x00', 0x802, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000a80)={'mangle\x00'}, &(0x7f0000000b00)=0x54) r11 = accept4$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x0, @broadcast}, &(0x7f0000000b80)=0x10, 0x400) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000bc0)={'veth0_to_hsr\x00', 0x8000}) [ 384.978004] FAT-fs (loop3): Unrecognized mount option "mask=^MAY_EXEC" or missing value 23:15:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000e603000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28]) [ 385.100787] FAT-fs (loop3): Unrecognized mount option "mask=^MAY_EXEC" or missing value 23:15:32 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) 23:15:32 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/mls\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000004c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3c, r3}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x5765, 0x1, 0x1ff, 0x7, 0x0, 0x100, 0x1, 0x4, 0x1, 0x4, 0x1, 0x6, 0x1, 0x4, 0x7, 0x7, 0x10000, 0x4, 0x3, 0xffffffff, 0x10001, 0x8, 0x2, 0x3433911a, 0x7f, 0x77f8, 0xc12a, 0x7, 0x4, 0x3, 0x3, 0x4, 0x80, 0x6, 0x10000, 0x1, 0x0, 0xb20, 0x0, @perf_config_ext={0x0, 0x3}, 0x1000, 0x7, 0x46, 0x0, 0x7, 0x8, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$key(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000000002000000000020009004000000000412d1fbc000000030006000000f9180200ee00e0000054d81458186fe8b90002000100000000000000030200044a7b030005000000000002000000e0193f010000000000fca0d9"], 0x60}}, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000340)={@remote, @dev}, &(0x7f0000000380)=0xffffff1c) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) readahead(r6, 0x7ff, 0xcd6) exit(0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) r7 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, 0x0, r7) r8 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)='\x00') openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f00000002c0)='wlan0\x00', 0x6, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) 23:15:32 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockname$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = fcntl$dupfd(r2, 0x0, r0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, 0x3, 0x6, 0x122, 0x70bd2a, 0x25dfdbfd, {0x1, 0x0, 0x6}, [@typed={0x8, 0xb, @ipv4=@local}, @generic="8e2e0f071a6dda617d671db062136705400366f6296a497612f008d1f7b54ef6e0dc6abc67c6503cb2a9fd35f5b2bcea880c1988a63be84320f89d81d1ab81874123c106362a2220d54bb7cbe4d34b122ed0528197cbca0b3bbea76cb5c699c415476390352d71630cfffa6c36d7af1b4f4e9e51fa5774697c2cbfaa9fd907f9d5bf92d1d70b30f866794f4fbe449aaa181f05428670d6583f263046dec56a76c40269666649baae39c4dfda8bdf8029d0640d880748d6bdc4354e89a6a2bfe492b770f3ee9a4580f8d2892eecca1b", @generic="69e402fb72b84609ff48"]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x40000040) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000380)={'bcsh0\x00', 0x4e0c}) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) fallocate(r0, 0x0, 0x100000000, 0x8) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) ioctl$KIOCSOUND(r3, 0x4b2f, 0x40) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000040)) 23:15:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 385.477406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:32 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) fcntl$setstatus(r0, 0x4, 0x4422) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x6) io_setup(0x80000000004100, &(0x7f0000000100)=0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) signalfd4(r4, &(0x7f0000000040)={0x9}, 0x8, 0x80000) write$FUSE_LSEEK(r3, &(0x7f0000000340)={0x18, 0xffffffffffffff90}, 0x18) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socket(0x9, 0xa, 0x7fff) r5 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x4, 0x7, 0x847, 0xc9, 0x2}) 23:15:32 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000003c0)={0xfffffffffffffffe, {0x0, 0xfffffffffffffffb, 0x1c, 0x7, 0xfffffffffffffffe}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) getdents(r1, &(0x7f0000000180)=""/79, 0x4f) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x7fff, 0x0, 0xff, 0x2, 0x24, 0x6}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7ff) [ 385.777149] EXT4-fs (loop5): Unrecognized mount option "wlQ" or missing value [ 385.825771] EXT4-fs (loop5): failed to parse options in superblock: wlQ [ 385.854917] binder: 15001:15002 ioctl 54a0 0 returned -22 [ 385.882957] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.916728] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (8100000) 23:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd7b, 0xffff}}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/fuse\x00', 0x2, 0x0) r1 = geteuid() write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x7, {0x7, 0x1f, 0xfffffffffffffbfd, 0x1800000, 0x1, 0xffffffffffffffff, 0x1, 0x5}}, 0x50) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r1, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = geteuid() r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) r8 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r8, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) write$FUSE_ENTRY(r7, &(0x7f0000000540)={0x90, 0x0, 0x8, {0x0, 0x1, 0xaff3, 0x10000, 0xfffffffffffffff8, 0x9, {0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x8001, 0xc42, 0x8001, 0x944a, 0x0, 0x4, 0x81, r8, r5, 0x9, 0x3}}}, 0x90) fchown(r6, r4, r5) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@obj_user={'obj_user', 0x3d, 'rootmode'}}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x16}}, {@smackfsdef={'smackfsdef', 0x3d, 'fscontext'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}]}}) 23:15:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x8, 0x4}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f00000000c0)=""/116, &(0x7f0000000140)=0x74) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x2175, 0x100, [0x7, 0x6, 0x6, 0xfffffffffffffffc, 0x619], 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 23:15:33 executing program 3: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x7, 0x35, 0x1, 0x1}, 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002a00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002a40)={{{@in=@local}}, {{@in6=@dev}}}, &(0x7f0000002b40)=0xe8) fstat(r0, &(0x7f0000002b80)) getpgrp(0xffffffffffffffff) getuid() stat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004900), &(0x7f0000004940)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004980), &(0x7f0000005540)=0xc) getegid() ioctl$TIOCGSID(r1, 0x5429, 0x0) fstat(r0, &(0x7f0000004b80)) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000ff0f00000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) [ 386.370499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000019c0)='personality\x00') r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x2200, 0x0) r2 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/urandom\x00', 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f00000000c0)=""/138, 0x8a) dup2(r0, r1) 23:15:33 executing program 4: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="f95b0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x7, 0x1) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7e499fe412b31c5c5fd21dacb7b35ad29999e5deb90bd622b9f4a177373afcbc3b5bf61816d9162b65cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23136f1c21122803ab2e3a7c209f2ad15c3383db595c65172b70c954c01b5e237f81f433dd9e31ea8a7dc73435827acff83babd2e943473102300841ecb2e78bd261b870452493a3426094b0069c694ad0529c2b03aed0f5c1927e54ac8d1dd0b6e1bd8307f1220b4944f972b13c88dad75f0010ef63c18ad73ee87cd8", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="9f338885b87b558d8aedcbb605ebcfca9ba7a5b7f64c5649b189d8f1e87738c76c0200e40e766646ab973248041521ba892d95d2ceca"], 0x0, 0x11f}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:33 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000003fc0)=ANY=[@ANYPTR64, @ANYRESDEC=r0, @ANYRESHEX=r1]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) gettid() gettid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x100000, 0x8) 23:15:33 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) fcntl$getflags(r0, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) mount(0x0, 0x0, &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) sched_yield() sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000340)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000200)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='mountstats\x00') ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x3f) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000200)) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000080)) sync() syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x80) getcwd(0x0, 0x0) 23:15:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa7, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r0], 0x3}}, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x316, 0x7b, 0x2}, 0x1d9) 23:15:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:33 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0xfffffffffffffeff) prctl$PR_CAPBSET_DROP(0x18, 0xc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_matches\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x100000488) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:15:33 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x3, 0xa2180) write$binfmt_elf32(r2, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffff, 0x1208, 0x80000000, 0x100, 0xffffffffffffffc0, 0x3, 0xecb500c2323df16b, 0x2, 0x201, 0x38, 0x1f4, 0x2, 0x9, 0x20, 0x2, 0xcb7e, 0x20, 0x1}, [{0x6474e551, 0x8, 0x100, 0x8, 0x0, 0x10001, 0x3, 0x80000000}], "85df7c43baa65cb3fad0bd6bc3e61db75bd2081c3ae90287e5edd721e515ce378637a92024215496bb3aef3d5628b857a1af7d00dd7975ccc8292bd75187eacc981eb5b78c22b36ea6fc86ea7691eb6f9b0217dff71b32d1d5a3b07379c0a50aaaa70d9dea3cd6384ea23a354e313cd203e0a0a0d3d24a446a34f0ade5dc654038f8a705ce00a0b484c44df3d88674784a27278b46f7fa83cfdf6ba5ee2bd2", [[], [], []]}, 0x3f7) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x2000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1eb, 0x0) pipe(&(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast2}, &(0x7f0000000240)=0x14) 23:15:34 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = memfd_create(&(0x7f00000003c0)=',ppp1\'mime_typeuser*wlan1keyring#ppp1&\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0xa, 0x22011, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x7c00) r1 = socket$inet(0x2, 0xa, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0xfffffffffffffffe, 0x1c, 0x7) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0x0, 0x4000000000000ea, 0x10008, 0x7fff7fff, 0x100000d, 0x0, 0x2f7, 0x3, 0x0, 0x4c}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x4d8, 0x0, 0x370, 0x370, 0x2a0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x5, &(0x7f0000000040), {[{{@ip={@broadcast, @rand_addr=0x5, 0xffffff00, 0xffffff00, 'bridge_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0xff, 0x1, 0x30}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x9, 0x8, 0x0, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0x4, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @remote, @local, @gre_key=0x9, @port=0x4e24}}}}, {{@uncond, 0x0, 0x118, 0x150, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0xfffffffffffffff9, 0x4, 0x2, 0x1}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x400, 0x200}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x20, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast, @port=0x4e21, @port=0x4e20}}}}, {{@ip={@multicast1, @rand_addr=0x5, 0xff000000, 0xffffffff, 'vcan0\x00', 'veth1\x00', {}, {0x7f}, 0x67, 0x1, 0x10}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xe9c0, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @local, @port=0x4e21, @port=0x4e22}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x20080, 0x4) faccessat(r3, &(0x7f0000000100)='./file0\x00', 0x80, 0x200) [ 386.826981] binder: 15050:15052 ioctl 54a0 0 returned -22 23:15:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00\x00\x00\x83\xad\x00\x00\x00zl\x00', 0x0}) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x0, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)="456a279d83bd93446c74011dc78de642cbc7856ea2e2f3a25a144ab7ed4b07a3dce229a92400dbaa6e02c04fd90d034aa45982bc2dcaa19900660d518aa7a1bf6540977a72c1770512aa8a794ad307bd972cbeefbb47", 0x56}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000001c0)="11ae4ed33d23d49d4b97bf0c697c28fd98016bb47cf916f82785045f348cfff6c68fb8d4f99595270a5a7ade862fc74426e84366f1966deeb7c471d69560c601adcad043f49b1b6f111d01d8b0c7eb5b491c2325e0fee6f8f933ea1624f65d0f0e3cf3aef571582ec2f104088dac919dadc5e776c2ba1ce915a7278f28b48d2fa377049d579055f07a30753c651a3ba1df92a8e7bfce57bdbd70439cf528f74bb6e7f36cb7a53ce5522b5733", 0xac}, {&(0x7f0000000280)="7c70efea1a72d37abc89237c0e31bd13550dbd151992638a6f53cb8a694577d007385e36df733925beffb3b1c7f9881e507a0affcaa501df91674fbd1d5dca8c7039fa8150c15fea254dcfa067f4148dab9033cccadbe85a5145cf2f796a76ee4c3bb209b2d4b48dc2fc1938505f59b3c3f32209430fa5213f062720ce027af21764beec4a595df4569a4b97551ff4180e2fe2106d81b651e6b79292eeace980d0b2435299666bc50db6293a48dc8661da161f299a96cbc53923738709a0104a2c2beb0b5a981190ed732d6e1e06444f5976352af40d099299756f0d30", 0xdd}], 0x4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x20000000000001}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x5}}, @volatile={0x1}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @const={0xb, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x2}}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x100000001, [{0x9, 0x0, 0x6}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f, 0x5f, 0x30, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f00000015c0)=""/84, 0xd2, 0x54}, 0x20) write(r5, &(0x7f0000001680)="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", 0xfd) 23:15:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xffffffffffff8001) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$TIOCCONS(r2, 0x541d) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) 23:15:34 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x400) r0 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x240000, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x963eee8f6a696d5f) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@newlink={0x84, 0x10, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x8021, 0x41004}, [@IFLA_PORT_SELF={0x58, 0x19, [@IFLA_PORT_REQUEST={0x8, 0x6, 0x7ff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "945fc78a0d5f19e414a669540116e481"}, @IFLA_PORT_PROFILE={0x1c, 0x2, '/proc/self/attr/current\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0a82964ca546d715ba589d09355622b0"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x2}]}, @IFLA_ADDRESS={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc21ee04f3400d88}}]}, 0x84}, 0x1, 0x0, 0x0, 0x6087}, 0x800) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x200, 0x10) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000580)) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f00000006c0)={0x16, 0xaf, &(0x7f0000000600)="67648bfb0e395faf7e2c1e2adbb39cb6f1137f34ef890ef3329c813618aaacf0288583ef4ea80bab67bb195b3a044bea954e213a8e6b27197f7f54abfa9f72c41cf12856d0d64cbc08043a9f7e7c51334de43c559dc11047a84c920e8f1cfc62c55ba3a84d67dd954ed7251687c1c54f70ce781b64edc15dfa1088e5e482793ed1e1007e9b47ffd3f3b058f624f295db67c7a518f73b1c3536e939d19e35a322c02d68155dd3964d4c38c6cbb1b600"}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000700)="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") r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x400, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000840)) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_access(r8, &(0x7f00000008c0)={'system_u:object_r:watchdog_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x6}, 0x4b) socketpair(0x6, 0x800, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x3e09fa47792996fc}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a4, r10, 0x508, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xe}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5813}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xbccd}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x14}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x624}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4b7e5767}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) getresuid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0) r12 = getegid() fchown(0xffffffffffffffff, r11, r12) sendmsg$key(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x2, 0x11, 0xa814ca0, 0x6, 0x9, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x170}, @in={0x2, 0x4e23, @remote}}]}, 0x48}}, 0x800) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/enforce\x00', 0x109400, 0x0) openat$cgroup_ro(r13, &(0x7f0000000e40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 387.032977] device lo entered promiscuous mode [ 387.051687] IPv6: ADDRCONF(NETDEV_UP): lo: link is not ready [ 387.090441] device lo left promiscuous mode [ 387.109602] device lo entered promiscuous mode [ 387.131056] IPv6: ADDRCONF(NETDEV_UP): lo: link is not ready 23:15:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x7530}) socket$inet6(0xa, 0x5, 0x8000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r1, 0x0, &(0x7f00000007c0)=0xff49) r2 = syz_genetlink_get_family_id$tipc2(0x0) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r3, 0x0, &(0x7f00000007c0)=0xff49) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) r5 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(0x0, 0x0, 0x0, r5) keyctl$assume_authority(0x10, r5) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x7259d667984267b4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xec, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff21a4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfffffffffffffffc, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x41}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4000000000000000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40090a0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x84, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd94}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}]}]}]}, 0x27f}, 0x1, 0x0, 0x0, 0x4008804}, 0x48000) getitimer(0x0, &(0x7f0000000000)) 23:15:34 executing program 2: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:15:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) dup2(r0, r2) creat(&(0x7f0000000280)='./file0\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0x1000, 0xc4}, &(0x7f00000000c0)=ANY=[@ANYBLOB='enc=pkcs1 h56\x00'/71], &(0x7f00000003c0)="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", &(0x7f0000000140)=""/196) 23:15:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000280)=[{r2}, {r3}, {r2}, {r3}, {r3}, {r2}, {r3}, {r3}, {r3}, {r3}], 0xa, 0x1ff) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000100)="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") ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x3) tkill(r1, 0x14) 23:15:34 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x3a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfefffffffffffffd, 0x2, 0x4, 0x2, 0x1000000000004}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x4ce9f1) sync_file_range(r1, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$void(r3, 0x2a29) fstatfs(r0, &(0x7f0000000240)=""/251) 23:15:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde9, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x77d651799ded31b9, 0x0, 0x0, {{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}]}, 0xc4}}, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/114) 23:15:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'sit0\x00', @ifru_data=0x0}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x800, 0x80, 0x747c, 0x1}, {0x7, 0xb3e, 0x7, 0x7ff}, {0x0, 0x7, 0x80000000, 0xffffffff}, {0x0, 0x3f, 0x480, 0x9}]}, 0x10) [ 387.960498] binder: 15130:15131 ioctl 54a0 0 returned -22 23:15:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2, 0x6}, 0x1c) 23:15:35 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x50) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000000c0)=""/240) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e22, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e23, @local}, 'ip6tnl0\x00'}) r7 = accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0x1c, 0x800) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000003c0)={'ifb0\x00', 0x3}) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r8 = creat(&(0x7f0000000400)='./file0\x00', 0xd0) r9 = signalfd4(r6, &(0x7f0000000440)={0x8}, 0x8, 0x40800) dup2(r8, r9) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'veth0\x00', 0x4000}) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f00000005c0)=0x80, 0x4) signalfd4(r5, &(0x7f0000000600)={0xb617}, 0x8, 0x80000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) capget(&(0x7f00000006c0)={0x19980330, r11}, &(0x7f0000000700)={0x5, 0x1f, 0x2, 0x0, 0x3, 0x7}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) r13 = syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x400) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r13, 0x800c6613, &(0x7f0000000780)={0x0, @speck128, 0x0, "de0843256ac0a199"}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r14 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000800), 0x80000) sendmsg$nl_route(r14, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@getaddr={0x14, 0x16, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x90) r15 = syz_open_pts(r3, 0x10000) ioctl$KDSKBSENT(r15, 0x4b49, &(0x7f0000000940)="ea57c5c3053fd57728203237d767ecbd9cd95c94cec17b3c686f91bc0874b42e715cce303965b72cd3db1e4c6bae6fe9331079fc18cb459b579aaf9ff56749a153c1d6fcc310b420b48e3e7257bd35d93a4e486903790054193d4108b1c461e2537ff54a6d9120a5f719a1f9fcc1583f02e934e453afc57b62") 23:15:36 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80) 23:15:36 executing program 3: r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) fstatfs(r0, &(0x7f0000000100)=""/94) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'], 0x1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlink(&(0x7f0000000480)='./file0\x00', &(0x7f0000003040)=""/4096, 0xcb7) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="752e6d73006d010031732dbb29ee114f4de10e890cd1"], &(0x7f00000000c0)='system.sockprotoname\x00', 0x15, 0x3) 23:15:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0xbd, "8508f6048d84a67524ee3cd9f1d474fbffdec2a09c7840fd9726c89af9de20f7c7e4576d0112736043069617a13bac4d68a6c9c4501610b414660af8e4e0de1fc4f98fefc35713d678b1fa105b5c31c589b134fc4d32373168026b3f1a94bdcae298accd83a90246b1547f1576d88153e265d0a1387d06c1a94d56f94f53a75b10443fef7d2b579216214b687791959dcce6eabb1c2c2078cb3d5b7c257233554eb2f8f41717d7f1d47e532b42746bf3105bbf9c5778f8e13ef6448010"}, &(0x7f0000000140)=0xe1) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 23:15:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/190, 0xbe}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) fcntl$notify(r2, 0x402, 0x3) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "00000000f2ff00", "09b7d941df45037c418c8c7d74db440992c0bd37dd2ccb34c14620f860df4f96", "52769b5b", "ea76d4853af64525"}, 0x38) 23:15:36 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x40045565, &(0x7f00000000c0)) 23:15:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0xa, &(0x7f0000000100)=[{0x5, 0x1, 0x5, 0x4}, {0x7, 0x3, 0x100, 0x7f}, {0x5, 0x5, 0x0, 0x368}, {0x5, 0x3, 0x101, 0x7d21e19a}, {0x1f, 0x0, 0x0, 0x1}, {0x7, 0xffffffffffffffff, 0x10000, 0x81}, {0x8, 0x0, 0x3, 0x4}, {0x7fffffff, 0x5, 0xfffffffffffffeff, 0xfffffffffffffffc}, {0x4, 0xc198, 0x1, 0x1}, {0x8, 0x5, 0xfff, 0xac1}]}) ftruncate(r2, 0xff00) [ 389.130492] binder: 15162:15164 ioctl 54a0 0 returned -22 23:15:36 executing program 0: socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[]], 0x8}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7a5b7f64c5602000000f1e87738c76cf8a8e40ead6546ab973248041521ba892d95d2ceca3e423ded7d092f03b7f9b3f7cb5fa335e4b7a5c35a53ff592351"], 0x0, 0x17d, 0x1ca}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x6, 0x1}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setopts(0x1f059e41292ec39d, r2, 0xffff, 0x0) tkill(r1, 0x30) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x3000000000) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:15:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) dup2(r1, 0xffffffffffffffff) lseek(r0, 0x0, 0x0) 23:15:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r4 = geteuid() r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r8, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r8, 0x0, 0x20, 0x7) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r9, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r9, 0x0, 0x20, 0x7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3b) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r11, 0x0, 0x0) r12 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r12, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) r13 = getegid() r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x3b) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r14, 0x0, 0x0) r15 = getuid() r16 = getegid() r17 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c, 0x80000) r18 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r18, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r18, 0x0, 0x20, 0x7) r19 = openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x80200, 0x20) r20 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r21 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r21, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r21, 0x0, 0x20, 0x7) r22 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x0) sync_file_range(r22, 0x0, 0x20, 0x7) r23 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r23, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r23, 0x0, 0x20, 0x7) r24 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/mls\x00', 0x0, 0x0) r25 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r25, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r25, 0x0, 0x20, 0x7) r26 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r26, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r26, 0x0, 0x20, 0x7) r27 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r27, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r27, 0x0, 0x20, 0x7) sendmsg$netlink(r2, &(0x7f00000009c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x24000009}, 0xc, &(0x7f0000000780)=[{&(0x7f0000000040)={0x4c, 0x1a, 0x204, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x89, @uid=r3}, @typed={0x8, 0x42, @uid=r4}, @generic="dccc4ab3ed992c4a72e794f55242454fae5079a5aa0be021dc1277da0b581918917dbeb11ac5a8744d6a412c"]}, 0x4c}, {&(0x7f00000002c0)={0x1d0, 0x2c, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x96, @fd=r5}, @generic="6f2913978c7bd9a430e1b0c11b14f4b6cbb89622e569f9e6bf3bd5cc9eb84a1de85aa4af0ae77548cf65bdd5dcb3f349c6b78fe15cfbf3c4f61965f5b909ecbd83d9e3f0f1abf849899806cdffe9d84aa7b51eedfe73205e468885c0", @generic="fbef9a12b8a2fd9a492e8e1e71c7888d6b3b833ef8760923fc9a478e390aa668a882a73999b0d098eb74c23a9e6ade22c3bcdb38f3ecc4dd9fe5334f330f9e387baf7d4d2000178aa2de10bfefd86b81ea5aa8", @typed={0x14, 0x93, @ipv6=@rand_addr="3320329dbab03475eb1d106774f65417"}, @nested={0xec, 0x5a, [@generic="d7e49da2eda5", @generic="19ff1acbd8964bc6687eab43414d25cc542a258489d24a", @generic="3a549db10f5ccb6cbbfecfa14531c7da3077658f3865c27968c3b73ff1fb269209184e0942002d5d92e616779275be8f583381d4d9a2462c4a6584d677aecc91dbdd58b06665d67e352efc721464fcdd41f2f4515b5aa91debadf050eeb22db6b7ab627ce4747a9d1bf85a33e81368378149f3184ebea26547ecb8d5615e9749a466e86b9542e30d64ab175a47f26c6688545ef39e49042ab2bd0d3953eeccd8d26df80c384d12793bc0a8cd66f030406c8e0e696a8220c6d74aaa165f6937b4c8f4255168cf341852e5"]}, @typed={0x8, 0x34, @u32=0x56}]}, 0x1d0}, {&(0x7f00000004c0)={0x128, 0x24, 0x22, 0x70bd2d, 0x25dfdbff, "", [@nested={0x90, 0x58, [@typed={0x8c, 0x69, @binary="c42d8791e8e4175f5c47be4a69ff3416a015bc98e34ae8fff48f1da5a1731966b89d1e77799a8888039494c37d0c56e5337011a1e2447912d4c4fd41644ffbf6cc086d1a4ae69add5a1886b55b6c43671eb94f647a6ef23699c55120329e7448caab612e347a96600714df1a6ebde007f0cb67dc73f26eac4cbd34883b1e3373fd97b0ae23"}]}, @typed={0x88, 0x80, @binary="3af5d6aa0697d259bbccc2abb8a0c1563b11ed5b1eee55ecb0b98bc08afe047d3bc2c47193d8a57edbfe3c556060d4a6c8ab2175e21f9c20ba406d6aaf0ca7b9e49755de8225cac40012057bec208b119097a090dcda10a59f2d606e9f9f257db2bc94c0d58f266986747090da4ceeb3e3b9994cd952557b1ac46df84eb92ea394"}]}, 0x128}, {&(0x7f0000000100)={0x94, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@generic="df8ae68a012874bd366d366f9f975e9648381a19354a69b97c76165355db2abacce7234773df844888c9", @generic="f95004431c58307e6119b5a42e62d828461e8b72902d4c393b729f417eb91fb912d193ac3708af0f5156471614f9a35a6d05ca8472708a291965c56c3c769f25a3c6fbf44aff10737725279c143bf4560a488e0702be2331037f"]}, 0x94}, {&(0x7f0000000600)={0x14c, 0x14, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x5e, @fd=r0}, @generic="14979dd380fe88246e9e8bcb58485e43ca40e60cbc6fd70a22454389073ed634f85e1d4e6995e1431c23cb359e1ea16bd38b421ccbf7f8ce051627dbe3854fee31590450b19161d5003260f030064598909c4847e04305310a4a0fcfd605f2d47626eb99f21abbf18cef662ff3953f2307c3a0de62d2faa2618e75af9d9a7423cc1c39e7889b1d2bd2b23cdcea17f6a5b636bee91b7f902e3eb7eadcbcdae1097ee61280a94c138285f8ccf47d0f12f7fb32fe7c17be7092fdafd6fd72f4bb26f1b5d8a8e268c940db2eac39ebf5e72d93be47db1e", @generic="17ab9cfc6aea62fdc4e2c613fd6b5b4bcb2b532f40e20582136bb0c41716d3e31bc7f7bd85c74643d7fa2ff8b6a6ad2bd08fa1ba415bfaea2fd063607e389f497ba9af78277737b42f7bfa71cc466ddc875d0708fb9b177cb3d45c59"]}, 0x14c}], 0x5, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [r0, r7]}}, @rights={{0x1c, 0x1, 0x1, [r8, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x30, 0x1, 0x1, [r0, r17, r27, 0xffffffffffffffff, 0xffffffffffffffff, r19, r20, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r24, r0, r0, r0, r25, r26, r0, 0xffffffffffffffff]}}], 0xe8, 0x8c0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 23:15:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @local, 0x8, 0x9, 0x8, 0x100, 0x8000, 0x5400000}) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 23:15:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:37 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe0208010001080008000600fe7f0000", 0x24}], 0x1, 0x0, 0xffffffffffffff70}, 0x0) 23:15:37 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) fremovexattr(r1, &(0x7f0000000200)=@random={'system.', 'y\x00'}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)="37fce60f5da4e68e8e133fa2abbc44edb9202abc002062f665229f35deedeac202", 0x21}, {&(0x7f0000000280)="8cabf2d7c1c1b2a30d35ca8385673494519d649d53510ba218c1f5c83ad267d9ef17fc7e244d35c920ffc48a749217a108d2b4e1a00bcac12422a33c01405f6eec835e161801fe29d7abe326f0769cd3fb0be4f69ca7d6ff004eb81ae9b3b8a53178575de52fd041436ff76c5b0e39f89debdae556bd11022582be00fadff05293f7c256eedfba9bcbd238ae74b55ba6236c223c66f88a6405373691fbaa1dc4991b057e2ee42237a4cbb952d3aec7caa00af5b6ed2e2322008ee34873e18b79aa4e9852be4174681046b28d", 0xcc}, {&(0x7f0000000380)="c2e90ab13bdfea68faba9813f41e626b49e794a6b85a5f66a170cec085fc7dd312ee348048c472c8e422dd0136f563a941f7b11a1af1f71b4228fba5a689035e3861d33ad8e69026da6cd00b71baeabc84f19b67226e2ec9854b1e96c7f1564ba5c93e22d60ca583d65252741c57e862c605394011257155cda359021f931100568b1b30527c4e08c91a0de66b3704838734647a202e0ef4b3d744a87837356b484cf2e553a7ec2808237f454ad925815631383a24bcb35d922f71c431b900e539a6dc55d823369009fa0e32ee0742c47e771f42569d", 0xd6}], 0x3) r3 = dup(0xffffffffffffffff) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x3f, 0x5760000000000000, 0x5075}, 'syz0\x00', 0x1a}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r4 = socket$inet(0x2, 0x2, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000540)={@broadcast, @empty}, 0x8) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x7) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='system.advise\x00', &(0x7f0000000600)=""/59, 0x3b) prctl$PR_SVE_SET_VL(0x32, 0x16f2e) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/load\x00', 0x2, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x22800, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f00000006c0)=0x7ff) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000740)={@empty, @rand_addr, @broadcast}, &(0x7f0000000780)=0xc) openat$uinput(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uinput\x00', 0x4, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000001880)={'nat\x00', 0x0, 0x3, 0x1000, [], 0x4, &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000000880)=""/4096}, &(0x7f0000001900)=0x78) r9 = creat(&(0x7f0000001940)='./file0\x00', 0x73a837e7e441c5ae) write$P9_RCREATE(r9, &(0x7f0000001980)={0x18, 0x73, 0x1, {{0x24, 0x2, 0x7}, 0x5}}, 0x18) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001a00)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001a40)=0x0) r12 = geteuid() r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000040c0)='/selinux/create\x00', 0x2, 0x0) sendmsg$netlink(r9, &(0x7f0000004600)={&(0x7f00000019c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc, &(0x7f0000004580)=[{&(0x7f0000001a80)={0x1354, 0x21, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x20, 0x89, @str='/selinux/avc/cache_stats\x00'}, @nested={0xf0, 0x6e, [@typed={0x8, 0x45, @pid=r10}, @generic="d0626d87c42c6a3e33ecdffbcb2926fb0bfef9180a3ba43f23ed7f", @typed={0x8, 0x39, @pid=r11}, @generic="91e6c29c130181219d4f07ce306034a50760b53f603c56d9823b095ee50b564b568ff08b708cbb70fb3cbffc2b0a94fe3a9644d7", @typed={0xc, 0x3b, @u64=0x8}, @typed={0x8, 0x4b, @uid=r12}, @generic="faeded576fbce2eb7a759b496b26e72b4a25037c45edf226ccf8fe23ab3b87dd258334572bcff7fbbccc632c8f9ac9b3461f48d93bf13805e087ca4f725e0a3d4916fcf89fcac4f30b67ab51b844141d1916e3154b2e865d5904853b244db8d6a984befa91afe7cc773851807fae", @typed={0x8, 0xe, @u32=0x5f}]}, @typed={0x8, 0x50, @ipv4=@loopback}, @generic="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", @generic="cc5d13e8fe9a581b193670de57cb538ed059a00373422e38d280ce82349afeef6962af5be9c8c6879b47ee0f833a44b11847b8b7a9", @nested={0xd0, 0x68, [@typed={0x8, 0x38, @pid=0xffffffffffffffff}, @generic="5c8319b0cf23615e3958a9b1e83f5b4667d6bb64ec430a745ed7f0865c635b7a961be8ab98315b4e72c2b84a964f9c87ffdcc1d4eddc22c7255fb90928dd12a0096e0112966c47d4ff1263b577141323814ec33ff6a45c4fd0dca7175f89b75ce0cebd7e378904fbeb24fe6d025e64dc07f29ac18901b2", @typed={0x8, 0x14, @fd=r13}, @typed={0x44, 0x47, @binary="44de63d0af818656c5e48d7934b8018c163cac8ecdb32ca1c7088537a567f4900412e5012d0c7e0b18cfa84b9217b21dde5262109e070dddbe2f9fa231d644db"}]}, @nested={0x124, 0x1c, [@generic="eaa3213dcff856a1ed4f4061871828be9d46eae823c785599a8847c15c98507b249a315bfbddaa1dad9e0bacdbe3c716a53965d88cae6a93fe7a5a0031b7ea276b1f6bdca98ed14e3a5d87dc1747e7d0229daf42cf883d3789fbde6252bb6e2055ed67d3412724be9170e67f8acdb232bbbf2492b15932225436e54f2c3950c82d845e1f9b66da6a3b5721d9a7e5140462815887ece8373ead63309cee6b1c3a445861513986ea50acea7a7ea31d25ffdfb19b9d031e01e0fb9d29702da794cb2cd68176d7e73824e9556a92888d194acfa08a5f214bd4336f", @typed={0x4, 0x76}, @generic="151f2c20ef94655b449f6d5edb6cc661d5613937bda5965dacd11d9c2233eb64575e95a267af079e8af751e4fa9d259c3dd2b5e2d615da9ebe590defb406bfe0b5"]}]}, 0x1354}, {&(0x7f0000002e00)={0x12b4, 0x36, 0x20, 0x70bd27, 0x25dfdbfd, "", [@generic="71bd89380337b9aaa0ba6acb13f181a923264d64b28fd5dfa5d8f4f3e8cff5ef329bedbd72a35b345d4c204ca1b8007799ce65afc37867aa17433e43817c93818d8e8f011479ab0e945a1a8388aae4df992e116004486f7ff89d4132851a938c1f26e9e685bbb9c24334232527630d18d24a3488ccfa37a0e81f9db0998b49b4fbb08d25a4bca7efae2444b5cd8c9474ba3211aae816d1", @nested={0x120c, 0xc, [@typed={0x14, 0x4e, @ipv6=@mcast2}, @generic="f35384696dd22df774150c5ab8ea23841b906082ffbbbb9c9ef1b0806cd2b471bb1d43221c9b67092aa133fd72c850513d04da3b197c7ccf2ec26bf2f0e1123eecce8c872b630f5c0e236e2879b598d5187c354cdc959d39f5dd24383587c6ff309cbbe984b69bdc225ccbde896222b5ded1e984ad668c702d1cc98efbbb78416a7e36f4f8850eedc8f666b947fdf7be669e8345a94977da1ea10ff0cfecad157a0ddc8ec046eb3ce4cb7a7104a955d6e4426676455947d46b0c2f3a6dc970bca38e6a8279a554a510a62916764b4ae6f47dfe52d4013afeb5f7c57ad1f6e2bcdf809a4addc6766de92b4ecdc0ab8f38c8ec95", @generic="beec7853ff375b301596823c60f8518612cca3353295ac7e80daa0decd030c8bf72dd625b1aa5dd7ec0380b9bad0afa64f87c874722658540ad85b1087d6aba9b4b1d8cb2b931ebd9c84c17b2163ca1af5700caf1f40f2e123285d18ee7b1b90bf53fc7b824a953f166e3751b4f2f272f24a0a1379476b20ec1d5ec63f22988b5426d47340c67baefe608794b3c09988044ac93a0b7e94bb9c2dfe4a5e07eca27652098e5e7d4a0f38b5c412d7e60c9e64afd01ba6c7582df4b8aceccb65c7c37da5e78485e43d179ad67f0868b4daf8e81db411e5232d559966abd62a583feb48b0da6ef24a6317034b5e8d4b6402987aa2a8cd3a03bd", @generic="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", @typed={0x8, 0x7a, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}]}]}, 0x12b4}, {&(0x7f0000004100)={0x30c, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, "", [@nested={0x4, 0x68}, @typed={0x8, 0x30, @fd=r5}, @typed={0x8, 0x84, @fd=r14}, @typed={0xc, 0x8f, @u64=0xc}, @generic="dbddcdb6f48d40f47746b8a49ace5ac73b7e3ff962e3937912f24b3b4a409a2b68d4030b83edc3793d38466c0f82a7f46b495cae56f9a92d3c316de8bc08bffc4cf60da2255fa72351fd89ef360c7b7b517adf48c1cccfc00323d5f84971e032d241ccbc396eca7d6de18ea4e53772f8403d8ea72fb64c334946286828b5505ea61b2a93e7ed6a183cb1e1a1cfd4fc9b7b6276b2373c0b8d6e84fbbedb583492ef525358a0a0e9017be07886a78a7a3966c0b57719c9725d819b2a0cd51a977eb02e7ed07a6905dadbf0080cad8b2bbf3a85422af46ef7c854838734db62ed960745536081f3f4e9da2861bbe67dd35f", @typed={0x8, 0x51, @ipv4}, @nested={0x1b8, 0x8b, [@generic="d3938d7738e8f28d5fc1aff5cbe6395c724d6ac706ee6ca09f6d13648e2caca8f11b9b32e26e40a71a022555e71292129fd49ac257e74fc368f6f296f0ee3c0bcfba36e04ee30b26c6faa49276dd80ff18c4adf74f0df7cb68b25a1f10c7d25a4af0404d40c7d715deadfba3524fe115ca59ee507ccf77a3cb6643107af96ea0959ca4cec784644d7f1d50d309e4bd45110a03b459151ef53ce5a437ff699d0ce527caf43ef24a861b7ca454c776aead4b4596876a813ea3a040e5a6e453e8848870e2ca40", @typed={0xc, 0x3c, @u64=0x9}, @generic="f1a206502a99c3c1e8cf64457cefa26f2e19595e3564479b5a47c27d94a3c98f183efd1cf9b9a2e0d4178fcaa77778950e295feb95d223afbc55d4c42266399a874919a9581afd4b1bf35f70424b810b484b253cd51e56f8c6a93f7dce550c565e7591d90d2ef81d167ad18e9c2ecaa6dc18682d10aaa83887dfe651326744bad091d4e70494b1991fb7d1f846d06948c6aad5324aa7abbc03a441e54d962b8b8edbf340e9e1b97e9116c91f4d10c5fed224c3e2ec28149a092427abd2038560d68681b0448cc07533b0080e439afa39c1d5906f701c2e6603cf2aa130ba1f13"]}, @generic="1cc7e738dec292f41b8edae97bbfdc7a7fe02fe8145c308631cbb0d80a7f91da514f1a9f", @typed={0x8, 0x83, @str='\x00'}]}, 0x30c}, {&(0x7f0000004440)={0x44, 0x14, 0x400, 0x70bd2a, 0x25dfdbff, "", [@generic="bbaa47741166d2834dafa5a7101a14a29e18c230b0b52b72e725b309532f9a44f1ba13bbb3f3c97f5d6d35e22c81297fd7"]}, 0x44}, {&(0x7f00000044c0)={0xbc, 0x2d, 0xe, 0x70bd2a, 0x25dfdbff, "", [@generic="b38a7c8058134345b0976f36324a74a05d0c3ae9af4c3300e8c80df9cf820d420f37a090242968f4e7d21de521e72cd9dfbe0589452ff66509e4d344e2ac48abe91f3752b4af20d3f1924946b8a1f822ca3c3e2ed62a759271085fdb3e3402cac28b8b2ea4a7be757c2a664b368046e5243f620ecbd01cce6f7e9f8fe3de5a6f9feea8a5fe84d4d26183b1a4d3e37b6757d74c649b0042fa946dec6f12e9c6c555dc845eeaf19483f3"]}, 0xbc}], 0x5, 0x0, 0x0, 0x4000}, 0x46000090) [ 390.005930] binder: 15185:15187 ioctl 54a0 0 returned -22 23:15:37 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$key(0xf, 0x3, 0x2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 23:15:37 executing program 2: r0 = socket(0x2000000011, 0x4000000000080002, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x2, 0x6, 0x8, 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x3005865}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x5}, 0x80, 0x0}}], 0x2, 0x0) 23:15:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1a1006, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0004"], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x541b, 0x70e000) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x10010000000036) fcntl$setstatus(r0, 0x4, 0x2000) 23:15:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @empty}, 0x7}}, 0x0, 0x81, 0x0, "1bfd949f0f40e631534686d35cacd28b9c66e782ade4324e8cd61b39addb85ccdcb9d16d28ab41c6ce4d3619e6801941129895ee8447e780d3b2ece11758312c57c687d34e7fe6e26f4d817c40b2ab90"}, 0xd8) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) socket$netlink(0x10, 0x3, 0x7) 23:15:37 executing program 5: ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)="625eaac3b46418c9b0dc5c823eee23acf5f03c3958f41cebeca0ce873fe36fbb770bbdfd973ace7e1ee483411ca2f7c3f5ce3b7afc8b0f196d6efabe49863577a31f53d05526119423e72f142158ad0dc76fcc9b44873543549895bedb1c8f3d31fc19a8d30b942eb1aefe339f165206806f6d6f53706dd716488dd7b24695c397ad5a531c55a4ac27b2bbb4a9b50b6ccdebbe04c251c8") sched_setaffinity(0x0, 0x2de, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x20800, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03fe8d0e6ea50bc6bc6c784fa6fea56e"], 0x28}}, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000400)=""/128, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x800000000024) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) [ 390.457456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.528931] selinux_nlmsg_perm: 503 callbacks suppressed [ 390.528978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 23:15:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10003, 0x25) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/276], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005500)=ANY=[@ANYBLOB="c00000001b00210225bd700000000000ff010000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000006d00000000000000080000000000000000320219fb0ce9bb51e866315d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b6e0000000000"], 0xc0}, 0x8}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) [ 390.590878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 23:15:37 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000004c0)={@multicast2, @dev, @multicast2}, 0xc) writev(r0, &(0x7f00000023c0), 0x1000000000000252) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x7f\xef\x00\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) listen(r1, 0x80) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xeffe5c743ab652f7}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x32c5b6b9c6a1d06e, &(0x7f0000000280)={0xa, 0x4e21}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001fc0)='./cgroup.net/syz0\x00', 0x1ff) write(r4, &(0x7f0000000380), 0xfffffffe) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000140)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 390.634252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.660581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.684236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.739612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.808108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.877787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.919429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.934778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.952232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 390.981468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15217 comm=syz-executor.5 [ 391.240553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:40 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00'}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r2, 0x0, &(0x7f00000007c0)=0xff49) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ff018428", @ANYRES16=r3, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000090}, 0x800) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$input_event(r6, &(0x7f0000000640)={{0x0, 0x7530}, 0xd35533a1aef712a4, 0x1000, 0x7}, 0x18) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r7, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r7, 0x0, 0x20, 0x7) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f00000001c0)=@ethtool_rx_ntuple={0x35, {0x2, @usr_ip4_spec={@broadcast, @empty, 0x0, 0xb8d4, 0x1, 0x3}, @hdata="1325a38249146c919ad51bdf1f56204b1182f5e4c66cee39f2da70e8614cbd192ac246b3bff71bd435ceae8a71b3e92eb022ecc61d7857afa4b8f7b3b5871a72f8887308c92a384b", 0x0, 0x9, 0xa288, 0x6, 0xfffffffffffffffe}}}) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x1812, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x884) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$lock(r8, 0x25, &(0x7f0000000180)={0x0, 0x2}) 23:15:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x84800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) r2 = gettid() r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x2b, &(0x7f00000002c0)="3462ff9939ea94c81a5a28e4eb975319987e61396cfc66d2b007c8d8", 0x1c) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, r2}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000280)=0x2) write$P9_RREADLINK(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="fffd71b0e33b63821e95000000e00200fe"], 0x11) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) 23:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) recvmmsg(r4, &(0x7f0000000580)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1}, 0x2}], 0x1, 0x10143, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x63, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) get_robust_list(r2, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f00000001c0)={&(0x7f0000000000)}}, &(0x7f0000000280)=0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x21, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 23:15:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0x9, {{0xa, 0x4e23, 0x1, @mcast1, 0x4}}, {{0xa, 0x4e23, 0xf87f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000001c0)={0x1000, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @local}}}, 0x108) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x304) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/201, 0xc9}], 0x1}}], 0x1, 0x100, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141446, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="833bf278f89d128d4df5fddee0e4cbe76080f4c29ec27294183ac723ac5bcfea982f3338bdbd1eb50352e1a155abbc22713107f78343681994303fd13fe7bd8b057faf183278673f2780f4", 0x4b}, {&(0x7f0000000100)="1616a9cabebba87ed1f1dba1cc02eb63cbe3b7bd1631db50a9a8ad336a0e4f4b", 0x20}, {&(0x7f0000000500)="f23bd606ed649ef833a057f9bbd55280c98fbd5c177419b7f2ebd1b0bc02b69381c30d2ee2cf7d9fb450e7400ccb37459d267aa7d31563cbeebbf2e0fae959ed3fe9982dc76b868919edf890504d2073cc5a007aac23446c54ba656ca04057c20af9d258878f33275cdff39e69dac64b40c39fdc17b2a26153cf28dbc5c881a10de4cf8d976b4f0331660df55cb604c91977ec71fd58fba077d9769bbe123fae56c9676d2e8b2b76316246f0d77ba26b9a5a03b19e", 0xb5}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x8001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000003c0)='syz_tun\x00', 0x10) 23:15:40 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write(r2, &(0x7f0000000080)="a136a3a010cb11b833aa51ceff0171821bab54548216846e52f60010cc2ed36d605e292d0d6821a2c22e5979642d60342344dd7f8e9adf4635f4a36a1b51dd9adc821cbb95d3562f6b267287efd879259b12e5b406cced82368a19fc9057768f04abf2a4199ef5be31dbae91186f32997de69daae8baa485f72b5ea8c077c758e41e564954b7100e9caf789f152349df779330b6", 0x94) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ae932d4aaaa86dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d908878e29607149378d33e1db1c7390efff9b2d4bb6e235e36c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69ccc37ed00000d3bb3ef990d7af9904e39e2eabc57c0131311af64d091c42affa07ae1ca9b0cdad"], 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x40) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0)='team\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000140)={0x1}, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x3, 0x16a, 0x3, 0x5}, 0x50000000000000, 0x49, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x8, 0x0, 0xfff}) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x2b}) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f00000000c0)={0x0, 0x3, 0x1}) getpeername$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x200, 0x2, 0x20, 0xa0, 0x32, r7}, {0x4, 0x8, 0xe99c, 0x8, 0x1, 0xffff, 0x3e, 0x8}, {0x6, 0x100, 0xc4, 0x1}, 0x7f, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x20, 0x3, 0x9, 0x8}}, 0xe8) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x3, 0x16a, 0x3, 0x5}, 0x50000000000000, 0x49, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x8, 0x0, 0xfff}) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x2b}) getpeername$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r10 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in6=@loopback, 0x4e20, 0x0, 0x0, 0x200, 0x2, 0x20, 0xa0, 0x32, r9, r10}, {0x4, 0x8, 0xe99c, 0x8, 0x1, 0xffff, 0x3e, 0x8}, {0x6, 0x100, 0xc4}, 0x7f, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x20, 0x3, 0x9, 0x8}}, 0xe8) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') setsockopt$inet6_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000000140)={0x1}, 0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x3, 0x16a, 0x3, 0x5}, 0x50000000000000, 0x49, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x8}) ioctl$sock_SIOCDELDLCI(r11, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x2b}) ioctl$VT_GETSTATE(r11, 0x5603, &(0x7f00000000c0)={0x0, 0x3}) getpeername$packet(r11, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r13 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0x1c}, @in6=@loopback, 0x4e20, 0x0, 0x4e22, 0x200, 0x2, 0x0, 0xa0, 0x32, r12, r13}, {0x4, 0x8, 0xe99c, 0x8, 0x1, 0xffff, 0x0, 0x8}, {0x6, 0x100, 0xc4, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x20, 0x3, 0x9, 0x8}}, 0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000c00)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000009c0)={0x1f4, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r12}, {0x88, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1000, 0x800, 0x3, 0xff}, {0x3, 0x9, 0x1, 0x9c6}]}}}]}}, {{0x8}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xf1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x1f4}}, 0x810) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r14, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r16}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket(0x11, 0x800000003, 0x0) bind(r19, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r18, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r20}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r21 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r21, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r21, 0x0, 0x20, 0x7) getsockopt$inet_mreqn(r21, 0x0, 0x20, &(0x7f0000000300)={@dev, @broadcast, 0x0}, &(0x7f0000000540)=0xc) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket(0x11, 0x800000003, 0x0) bind(r24, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r24, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r23, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r25}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) r27 = socket(0x11, 0x800000003, 0x0) bind(r27, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r27, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r26, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r28}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r29 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r29, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r29, 0x0, 0x20, 0x7) getsockopt$inet6_mreq(r29, 0x29, 0x1c, &(0x7f00000075c0)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000007600)=0x14) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket(0x11, 0x800000003, 0x0) bind(r32, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r31, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r33}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000079c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007980)={&(0x7f0000007640)={0x310, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0xb4, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r20}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xed8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r28}, {0x104, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r30}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x8}, 0x81) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11d}, 0x23) r34 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r34, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r34, 0x0, 0x20, 0x7) ioctl$EVIOCGBITKEY(r34, 0x80404521, &(0x7f0000000280)=""/68) shutdown(r0, 0x0) 23:15:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x2}, {0x6, @remote}, 0x74, {0x2, 0x4e24, @loopback}, 'veth1_to_team\x00'}) get_robust_list(0xffffffffffffffff, 0x0, 0x0) [ 392.882311] binder: 15241:15246 ioctl 54a0 0 returned -22 23:15:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x803, 0x404) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000a80)=""/229, &(0x7f0000000b80)=0xe5) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x2) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="080028bd7000fcdbdf25080000000e08725d2e30b1238f9eb668340771b3034a28e6055423b417c9275e896d308272173e806c2b527beefcdaa81161688cf939d652eb6e3de0c7dc0141c1af95c2e2edcfab59c7021fe09965c24b9abda7bcb5dabf97c190b0f4ca"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x40, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) ptrace$setopts(0x4206, 0x0, 0xfda, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x2, 0x0, "24befacd93a6cbac5e1cb6e0631b890800c8cbf0285612b85a84b71d9b3da0513231f99032683ea4ae11dc36d39f93c0f1cbf85f6c825c64baeb084e063627612cdfdec98aa3b115b6e34bc0c9cdc8ac"}, 0xd8) fallocate(0xffffffffffffffff, 0x0, 0x5, 0x8ef) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) truncate(&(0x7f00000002c0)='./file1\x00', 0xde) poll(0x0, 0x0, 0xffffffff) r5 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000540)="c930145eb4c0506ebdcbb692eaa77928aab157b63fe7eaea144b66e52eec82be40ef6e631601376dfda85d7af060bfe39bdce813492fc62c85c2efd757644ee15906d2919a076adbc067441d1954c8f043f4e0ce99312a956520d87ba28fe6b021e31e4fd499164d96a6647cdc371e", 0x6f, 0xfffffffffffffff9) r6 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xfffffffffffffff8) keyctl$instantiate(0xc, r5, 0x0, 0x0, r6) getsockopt$inet6_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000480)=""/128, &(0x7f0000000500)=0x80) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)=ANY=[]) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000280)) [ 393.168513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.230423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:40 executing program 2: unshare(0x14010000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x6, 0x8, &(0x7f0000000980)=[{&(0x7f0000000280)="c1371c48b511c97870e0355ab0b64bc093c05cd5a8847818c74f7bcb818c33f006ca9d0a36dd7e4a460837a4255e881d0e0f0893a300e2853869e753684f2a4cc13e8545d42ce0d4bc92b03d5eb8ceb0ec57341f791f067c0e31250c595c41d961eb89a2ff358a9db5cd07314053a374118f55179ada3fee9b8c20071bd34dd21ee0cb078d2fc81498afe6fffc61796704fd2bb3d30b609d09c85b512d0f9e67460893d23c8f66f94da102e4dde2ba29bc9803cc7e2c68fa031b763e32a3511a66a04f21c6244e6bd131c79ce4891acc8ba2d49ae245a3c280349a2e642d4b70a904d66f2654d50126d2ccef7a4c56f29ba164b20fb5", 0xf6, 0x9}, {&(0x7f0000000580)="f6f2cfb72de21d87717cf4f2db698a9cd9954ac6fa095ce6d37f2fd95e4f54f04d4834d770e15028f8c20102bca023b7063a6da3861c7bde66a3a96e02d358ef46c120e060623e1ca3feab8dac195ced00c6217015d973f56d11fc3483ddddee2eb44fe784a82aa52e6aa559ee7658a95af31e66b787f2701ba4231453b2fedeb61857f5a8db6dbcc25ab5063b6409723eb64670daaf391f15b1b3229e5a65a9e5b0aa52dfa983e0d60e7f02a8c3e2ba4954a543ee2d8f5ba17c2dd48de1717041a0fb3ec67f20e874512dcb7284c60933b19dc37c236555e87707c5ba", 0xdd, 0x5}, {&(0x7f0000000680)="feff03ca94683260379dce35d6e14ebbd1eadcc34909edca4e31555cabcec90ad921d1de61314de70e7615b04683eb098d80ce8bc45143d1f41c2a3a319c773796a56323e9f25fc93e219befadf505eab1307812b8a9b6cc8568cdd20d313eef435a9f5d2a9224ccdd2a2efc37233b82653776f2b38ba6a29c23c37badf787588c5e8f84bfe582dd6ade8d9339ef480f445950af1e4732f5d4baf8e5dd4bf9e803c2bdcfef65ea2c4bf7d75d66d32666fd3b7e6d9f47931fee8fcd599d8b7785f6208365ffe96d46d2dbb91e78959d0187fe22a3", 0xd4, 0x2}, {&(0x7f0000000380)="3efb23b590cd912cc4e53e32fbdcbe21c513b6b18a93dd19fb2863ec", 0x1c, 0x1}, {&(0x7f0000000480)="cf7e8e84b094", 0x6, 0x9}, {&(0x7f0000000780)="afbe46b82500b1d30e2a3172fbbc89caded33d27574fa3276b2943568fcc320e3816d48a620da5a0fe475b34695d4ca8b90261e98b58ae46f3d92f2375999001b455fd271a0b3088a9c7ab7394636c85c83a1e9f09c12056cce8b9d0899874e2192900cde054f66a55bc14c6f1d02c0825ef07da686582bee76fa87d", 0x7c, 0x5b3}, {&(0x7f0000000800)="e9446203efbfe12cbecfdbdc6ec6b8f095814972204aee96f771fe1f4aef80057fa1237298d4edffa3e71e1f87b487c93b58226b4ad53f384b7dcd1fbefb8d5e6916f177fc1df123b0c9e8d2c77d21a9b1a3510d8dac0b28805e77311a896d18bf02", 0x62, 0x8}, {&(0x7f0000000880)="9dd8de6aac5a650099dc55dd6a281ef5ecdf509d77aa2ec7a4c545d11eae1110636260699997cf8392a91caa341abe9e43143279801685deffc8e85717e3713ea250d8121351e12e8e154f7527a7ee2456db6a9f2466aebd032f6be1f4ddf5e7d6e0677ed226190ffb1c11f90caa3132a25caa89da71f49ee4a0d5d6841fbaeed18ee8f30aa70225d5cb860afbd567e5dc4ea8da1068e9340e8339b379719d3662f039892e5327c60d2e5562b8fe02c7ad7cd0e15978e869a839f329ecd05763ca7f305e3a32dba4dccbb69665b1182ea01e415a0a19bf3f2e0cad", 0xdb, 0x9}], 0x2000026, &(0x7f00000003c0)=ANY=[@ANYBLOB="626172726965722c61636c2c6d6561737572652c736d61636b66737472616e736d7574653dc55b3073656c666b657972696e677d2c009ca62efb29b6783b2f12228ebeade23a1eb2eb5e52212b7b97a097729695271fa4d2d75152c927e7627355184da2231cec1d254e83f4c833fb107699d2e129141b09"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) readlink(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80)=""/78, 0x4e) getgroups(0x0, 0x0) r2 = getegid() fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000000000008000200"/24, @ANYRES32=0x0, @ANYBLOB="f12779fd395b5ccfdbdc3f37e70a4da7b1a2e4061a52", @ANYRES32=r2, @ANYBLOB='\b\x00\x00', @ANYBLOB="6bc2c3d3a24d76ef32592a4876dc54cfc6404200355703f97b87789a66042ef7f78f0a9525595eafbf569a54dc51a04915a3d2fa403cc6c2741b366cf8c7820259e94655329f3ef13448c8f64639e24a2e6c6db95addd5c2", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00'], 0x9, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40000, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) [ 393.307584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.360067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.453355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:15:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x100000001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x10090000000038) fcntl$setstatus(r0, 0x4, 0x80000000042c00) 23:15:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') lseek(r0, 0x20400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000580)={'nr\x0fjc\x00\xff\x03\x00\x00\x00 \x00', 0x10001}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000780)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1001}, 0x20040851) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 23:15:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000180007041dfffd946f6105000200000a1f000007002808000800080004001000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 393.684808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.788935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:15:41 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x40000141042, 0x0) unshare(0x20200) ioprio_set$pid(0x1, 0x0, 0x6606) write$UHID_INPUT2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) 23:15:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000010000d0568fe07002b0000000000ff0701000000450001070000001419001a00150002000400010009002500"/57, 0x39}], 0x1) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x8) 23:15:41 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xffffffffffffffff, 0x5, 0x8, 0xc8a1}) 23:15:41 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="f95b0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7e499fe4001977e5deb90bd622b9f4a83416e6363b5224dcd19192047d7fea8aea5a61544a6262e8ebb4c46b00000000a5486bfff7a10ff628d1de6dd7d6d6156ba3d7dc00358c62a8b8eef746cc82736bb5023548b8d249bf9089b6f4", @ANYBLOB="9f33882fbf7b55ad8aedcbb605ebcfca9ba7a5b7f4425649b189d8d7e87738c77951f4dc4f6c02000e35e40e766646ab973248041521ba050000000000000067296ddd52184b1bceca3e423ded7d092f03b7f9b3f7af11f94ee902229a792f619822d0e2e622de391e5160a0b847df14ad780a6663f29a9dcfadd0642b129e60090000000000cac64635e1211fc34dff21f897743ba21489666788171408121b6b095458220202efd69852905ac2c4d12765298b4395d526f8f5f7726215e142b6b71499c9e023dcefa6fa1e1852187c2480ffd6a56e4e3db57dc80efd8b87c52c489f"], 0x0, 0xfd}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x2}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000380)={0x100b, 0x75, 0x1, {0x1000, "5a44c99550b3e229474b37c258d0873b66e849749d83957d1e2a3419327ae62a315432d1da1ad7ccdf7086a46f264665ceb6c21000ccb0c80f3681ca5bfb11449bbeee8f7672898ec97820d6d4ba73f6bab34a8dc69db10b4f1deb7e2891bad608fbfed4c1c480c4eaceab0cead8815a05956fb1864a59e92d4adabfa325dd9974e7e09757065fa8b12ddff1230b00f0496b1a9e2227438f080e93c4c0ccfde6342a196543e193fd7dfb71900c7a082b30f148530695bc5e13b16063904cde3aef3aa4299f09049143d2dda5bf1f2c8b66f2ac96466b3c517be29b93c9799370c75a9369c756dc3068742939a5679cde7298f90612775934274b6e0535d980bd8a2c6a3b05e3ffac8a631830f238d75f55a48329a235d930e9a33ea3b09e82057ceb2ec849522253bb3017b22c11f49d33955db94fab929c2e589067d78e841f7f5e7adb03968da86444558724a91ddf378d4d47a1ddfb4b89e5c05c93382e67ce64f6c7232f03ce2b683b708cc23946086fc7da5dd897e92ee8bb80807b78e7fc22302863447185d3c6e6f6f51219a22d9fd311bc5fbb27b2dc38ed1e3a335f0c3cb295b3db178ded4d3bf84375ddef56091e7151b34753f733cf0c697d392979b21519573f266b519a42bfb622f916e4d32f9a18c29b5a82b0867b2c53f850c16da993f3add018dcb848225576489befdec8cda3505612f5919001036d4f3488a691f1d3ad49df0f79b937d047d2ce601e32fe5726e02467152a85fc41d549cfd810547bbec3c3676e2ac96e86defe25d1fbd22f548f085c488af0cbe9dfd1cd23423dd9d9e47a989d4fc4665af3d64b310e258afc1927072a04ff0fa2c9772300229dfa84074297c1a7192c1a73955017d8934bb8ad21f960826dea72ed6a9a3a41a2f535a47659b48d2ba7c6e0469ebe3330f5140c80bb559041f10657b4601c2f498446ee849fd2b30ca79230ed1357c9783364e666aad8cc6489fd4be6eb55dde035d1783221a240b9e5ead73fbee9639b63b12854b52b5ae6e494bb6efdc56b86a1786b4d8762a2aa872d4441bcdc0cccbb363dd926707d09ef525c7cc608430baf374ed30d67229d7c0c997f26d0f99786900b5d906fdd4a84af81c2090447d1075cb823f745bbeaa428cc3b3b7b6f56c0b80f3fa60202f44302f7a559b83bc3290c84f87c8681305768c75269c72a55b5330d0cc507a2859ee7187d03b56c140889a9a48b1f5bf637e7021f1ca629c5d2d4b4f0e6d66457b8af20ef807ee022e56d0c68511113af7fde102100f8f4904d88d1d3ceea1c64b92ce660a5189936c783bd71c511dcb5eb0fe68e42ad63d1277f91776a602f4745d6f9ff52091feca8363312cfe5495926c3435455b3303ab8cdbba61bdd23c0345dd2d361ee12c7e0d536fc1a9b2250f8fe36e90ed1d627e65c9f1d2ac04fc0e4bb8d517e6e71bfa7d2c32a276268c07fcd42b385e57a95bff78a4507dc738b1ab53513313cea51d7acfb5df7d32e936c7ec56695389f5f94a3b63bd37dc1e83d9d798ea9e50f630491d0ecf7ef25576b8b9de6832186de137f1e7a890d87859ea69c50f8fbb8fe02fe121d867e3f73cd71b5799b35b4c43be8ae10bab6a457370c30d2f82dfba48396971c5e109fd3dd96ad45c17b511076757569b0dc01de985eafdd444336cd6a32026a701eaf83bfad023191b43d2433e1abc49bc910ec58b5870a8e644a5e552ec22938117a5b61b96b49172a9c6aa555582c73525333cb142ede8e975525705d43145ba808ca8714a37092941f07dbec56f251abdd145650b397063d1b5b6dd4e13ff0ddccf65315a8a0a847e7a5238e396e03f4c6f2bdcbb32e0863c5af663729ace848965875f1f4f3fc95d74e03ff01b18852b9132728ecc32c00bf40d7fff13e9d7528481582df356bb5b1ca99426bf65c75f915a9c80864efc72d351661522ce1abaa03913726c321f2923e8e0e5ba38c63c8c4234e33be7ee307bc20f30ca55576a0497f04486c4d6884bc5c93d53e1f6105e3d5d43c06fefd3f7a1dfb6df2ef310c594660b019a46e98eb00783fc77213a44e6ad82b05e7fdc846addc8536e4f7c047d35bd5a4b1b82a1d330a1ea8ff9d69330b82a9ebc8f74d82d7b1beaa3e8601d212db352fd78327a3ad413012ff780dc1f76d7449892ccbe68a995d1b032d60c9233ddef5446a0e42daff4c4b9f1f2411cc4c15faa9c73490dc56a009544c4dedb6011f09e1389d7e7c21de45890b09cab547c555e20e5cb82439fc1b4daaa2b2115e11fa940228a59d771d1bfeec360c03a2d35da4dd74599d5d6c9259c53578e2ec7b8e49695ced2da1a75a095536c5b8c64b57ff0b446aeb8a6b5377bbf73442e8b5c8f71d429b60d62ee022165edee7f993f1515dcb884d2d7fcd2d44b8706e73bbbf2884dc52f93b76f6ff76b7aaffe3b0a9145d6c9bea1395c545b28771bf1f51c73a9cc2042f5cec40ed894ef754042dcdd1ac5daeb3ca267db99f7047c9b8c86a671908c4f84d1b6e863f659a31c1b97a730d5091d6b0aca131affbcd6ef99f06fdc750fec7365df9e51319b97eab476d598fc864709c28845d1a7b86ca37962c254631dae63483145ba7801901e4e0ada0375e0ddbc0363aee91d691df59b857e9011638a47b2b4dc62abff902c4f51738af5d957a7fb70ef9cbe28921ac427ba58c8298e7d6cb70861fb7f343961a84f10e18c224574e8fa39faeacb6acb947ecd75a476aec3bf3a631ce1f5c2eace1c9b75e1a9b5115cc564b5f7361c62efea7032865cab824dc422659623876d7aa8756baf2b44c6857a2aa7949e225a7d19ca79bfba946b721290e76aac0f2decfaa4158e2f73c0142b68ed2cefc9d707b365568ba41890845debe82451c06bfc667a69425bf653f0aa09398acfae1db5ee80bf8510915771fb4d5fd65a599fe8604c60dfeda4d6d42f0a55bed145350f82684acfb6e8e452721c64d860973235e2472c8098ca4dec29b5d7a92f43714b730c8da0c4f0bd236b2fb53cdff54a34183b4e8a1d102962e7a27f4e236e1b9398147f23894c6ca562d1dddafd636a7ec43da1d5eef88df1fbdd30c6ef5629ffbbc8e8c95e4039cd79bac6a63f47c019c56498f7e816607899e48e3e07d6e2841e4f15dfb92b96d13b88c5763163423d3db1c5cc5c2374b7da2789e3c4eb4042013e343e7945ba771add86f310f2d7da7dde011868514992edd2143b89375bbd6ededddb9b9261c2459146db9c7908ec2d901deb6e7c156368a972ff0b8d7c5e74a44f88d61355c3f80573d9890aa8befbb55a6e3659edbbdd13b47bc85f7613923c6ca3d5ac78d5acb3f9daff1422121a5833260c6940cfec7920d173ed1de8a782c36c156a712650201f7ab54aeb187c58159b1bcfbac04e5aec9c2c79e5aa008d4b3b0d72ffb7b4294e0728e7e4e13c94aab62d5bd4b2871a9a4a7e76d63cc3274b40393739c3bc73dec0d52d51040331b9c68551a3d8a69713d4abdacd3eb9d6d8134f9adb3ceb35d41e6a5738661f14287d77a49c766df9b16790f59b0c9605eb4449c8ea8d19c596be2d36938f62f2ca6683ee2ea4a115b8526dec9756a7f37277b72c1083f5fab40a0e73f57848e4b08780bcef2726fb988ce80f68e35c50167a96e0c9d995de4f9676790814d3d0436addac98dfeeafaa120be387c2796565050291cc004cc48e607ae64c70b7a7ca8c2795b0a43e99d0e994c61be58770e3e73e9cfdaebbd49d7291dfe9746310c51f62696b1b3f89badf18c2f0d9a92bed363c6341a61dae2136f5cc5255e6616d28dfd4471ec219d81f5c6de777498754619f11ae46deebe2fad1b0acc873ffb7d40a77235389841d0e144668d41080e27ec732851f086bd3f3d9e60ee57a0850f523690db2ef5a84078c75ead08a8e37a1b9e45a0f584bc4aedb0b645f3a37dbda4cc7bae65a5a9c761447265f585bcc18a6bdbba85f67bbf79a2e065ccb30eb6a9e17a4aa788438cbe0e10813b76eb469a3278e2abffc61c9e03a3ca6a5222c629e0b9893f11fc20481b6cb0943080ecca08813a3bd7592cb04d3bdf5907a7ddd664c34b9d260f01797d6a3bb4f8573562e8968063585657d529db24975955c4263440066482ec3a9001e3e5e28a2a9ab22c83d6310b36333e9c181ec9ef39a13802a2f1ec9d219f9967bdff482531542c558b9f3c2bbe4d7338e7001cf8cad50daefd19acfffcd66e7ffa9444b376bcd4e7bad737398fec2490f6ed52c261bfe4e8202d369e4f7f06dbf901f62b5335e682320c1ec2d61acff616727653534550d8e96d119e2864315a138378685780501869b775a392b61a3754b39810212417a5a96523f734c57c2576cb033a3443af569548fe04c92931319571727efdc3c1e4f9dec14715402cf7b36c2ac9066662b8888b26997ddef3b15362dfc1d7e92bacf2cc4b965c800a7ac3a55e912f234f976c02ab4967afe8b9d5eec9ff00d04131db08ef1de025d7ccb811e998c0fe3332d2d963487b53a220823023e7c1d7757bba82c02cac56f176183fb5204089ca55c2a6bd3483294efd2ec879c4cdf3cd885fcf88da39589ad4f640772b373dbfdd88e8d6f5d626f36c1641c551046ce36b986dd0d2e78179549d90801196c5861802810718b2bfdccc0158680dfde1332bf31f2dbb44cce1ad6d8b0aeb9a6d366bbd565cd0ced67f3c269bc273e69728c24da14fb77374fb81c596bba6380e9740f699ece1377164dd13cd6c8949877a4032c33ea64542f190de9d1955f919610784ef637e9202f0e23da60fa786ab33de66ee31cf61df23661649e89c836254066678c3c755d523ebe090596d47d805cae1138beed525bef93a1165b4469b02b9138708b6397f287b9723630c5eeadfedbc11eb5f69c46f0ed11761a4d38cdff7b6f5591a585da42d5672465dfd16ee8da160cdcd36fda7b838e2c1d1fa2fdb6408c327df310f8175f98e99cdf05d72ffe3ed6ac2306727d752f8cbf0ecb7996641ca790606261d9172667fbab2cfc72809ef1e28b84c2699cb4a7d99612a36beca2f4aec08b705c9ad8a84d5c1a81b34846a5558a73d557ad16b4e3930ba7ee29a85dbdea39804f16f17581d651cf6b76e2d383c613d4d5ddf0af9bfbf2f09ad4c508615c11438080355f16d9b49f24a75968e8be2c35d0466b50e6728d7c39c95dc91c3867c167819ae5909c09b07fd6c8a70f78cd2fb99b6e3ca8eb0f72e9a13e01855180657546aac8f6277087ffc98d5ce1ef66577dbe8c1ec6a73c1a26879e2ab693d5d75c371b1d8388dff39d2c3028bb69a63d767d3b40376804dae5a904ca9347d1eb77ca701e2c2a23b60b76df8e0080509dc3a86e3265acc249044d94636e616d288a90775e08dc7623353e901f6255cf89c36d02886c0447d2489cfc723a15206495462450e4b8c2fb3958d53098444a28cfb0925b6bb138185a41d5b5f2c7e9aa96cbb97bc53a5142616506a57c25f1deca281f029efe2ec34f8397546ebfb3d0a4eb64718f6a0f25bfdcc7a0bcae2a2c2a6930e408bdad2b4b0a1d1675c6261ff839f2929f4fe509a113ee494053881fddb0ed455921758dcfe97586ca769f0b00f66236c13162a37605d51865e970a9636f18402887bd90f04ecfb536021e748b482f8697315a69f0956aab10d4860c48c0c594d5c9ae1069f4a86c9e18cbd4eb7f72c214a4f8517906e1c3b7e5a3b17f18d0cb6295ea5f5743f75ae1a872d84735de9ef8545ab124c56c4a59faa86e059c16919b419a659e948421c4e820025f3a81785"}}, 0x100b) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$TCSETX(r3, 0x5433, &(0x7f00000000c0)={0x3, 0x5, [0x3, 0x3b3, 0x10001, 0x1, 0x1ff], 0x100000001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}}], 0x1c3, 0x0) 23:15:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="240000001c0007021dfffd946f610500070000001f00000000000400080002000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000000c0)={0x80fd, 0x3}) 23:15:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xe15c9f95369ef) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000480)={&(0x7f0000000000), 0x8, &(0x7f0000000440)={0x0, 0x6fb6a4841a3c4dc5}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r1, &(0x7f0000000180)={0x30, 0x5, 0x1, 0xfff, 0x9, 0x5, 0x7fff, 0x3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='uid_map\x00') getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) [ 394.135190] PF_BRIDGE: RTM_NEWNEIGH with unknown ifindex [ 394.155392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:41 executing program 5: fsync(0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000280)={0x28c, &(0x7f0000000080)=[{0x5}]}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000040)=""/12, &(0x7f00000000c0)=0x381) 23:15:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x10000000000002d6}, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') inotify_init1(0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) fchmod(r2, 0x0) r4 = gettid() syz_genetlink_get_family_id$ipvs(0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000004c0)) perf_event_open(0x0, r4, 0xb, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x100) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x0, @loopback, 0x800}, {0xa, 0x4e21, 0x7fff, @empty, 0x7}, 0x0, [0x0, 0xe20, 0x80e, 0x0, 0x0, 0x6, 0x5, 0xdb1]}, 0x5c) [ 394.317060] binder: 15346:15349 ioctl 54a0 0 returned -22 23:15:41 executing program 5: socket$netlink(0x10, 0x3, 0x0) unlink(0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="401bccd3d2bb03000000148c0f34"], 0xe}}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x6) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004000000000000000000000005000000000000000008f1ff"], 0x1c) tkill(r0, 0x40020000000c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 394.870174] PF_BRIDGE: RTM_NEWNEIGH with unknown ifindex [ 394.875892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:15:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = dup2(r1, 0xffffffffffffffff) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x6, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x20, 0x5}}, 0x43) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x10000000001c) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000240)='./bus\x00', 0x80, 0xb0) ftruncate(r5, 0x10099b7) getpgid(r3) sendfile(r4, r5, 0x0, 0x8000fffffffe) 23:15:42 executing program 3: r0 = socket$inet6(0x10, 0x400000000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="10654c7598178e23542154fd47729c95a8928c29fcf3fc2c1ea5d02b41ce9adb5bd573ac4ae7c1ae64b8debf7d80acdade99ded474e0cd595fb14d72676bdd96aa98a0", 0x43}, {&(0x7f0000000240)="76e3dccd6fb82e2e28894d8923a3044cb6abdb9df9e51ef27dddaa26b6e1441dcc5a0a67efce1d541018bef9db9b3961a620b65654202502d8ea5462bdbe88547adca8ba93c1ff98e3f1241b3e9b2c70c49990d087360266bd1addcd942981", 0x5f}, {&(0x7f0000000100)="1ae6d3ecb49c0500419f4ab422d9e555a64f8afb98d3df5df93adcfaac08f81ec00c6bdc194aba87460172e6af9c79", 0x2f}, {&(0x7f00000002c0)="13c3913cbc37c0eab4dfc39a21302f60fc2b3a0e9a49e578b995da1c0ff34b967a506c633df4a421d68d93ab5ffa593568027c28f78a0d37b5b00c0cfe27e130ae30067e98ac3efd5d64ca182979aed039a727a75074d498f3dac7d29ddc169887fd9bdd8638baf8e2f9c463691faa95a209d4fc2e7a0fb06cb33b4d069301f3360ea09855ef9d2be983edbb96dc9f279d4bd59d769f6a8a65e4a212b52c40161c33e06ac62d306162fbca850cca0ccf3fa397225f495c093fe3ccf76f0052431f4de11b2ac87d", 0xc7}, {&(0x7f0000000000)="9345f9101fae43ef291d670b7a1d2be52e12bc19cb9ec1e5d68d3b23b0d288483d", 0x21}, {&(0x7f0000000400)="d7de2fd8d415ab72ee684f903bbe568347b22cdaa013e7ca73c7941e0b23ffba2a4665c0a1541e8e19ea1f444b566434c5ba12489be9384408b469e56a1a803d06f81e286bae8e3f3d2b1f91fdb2a0030ec170a4e2975d3405e9a7c04acceb9c2b68596b4e8a939881b712159c59b64f2124916c2ba21ffeef6e032e1307943495e2ebc49c986f4012931f49e210", 0x8e}], 0x6}, 0x0) 23:15:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:42 executing program 3: openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) exit_group(0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000ff0f00000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e0000001000000000000000031674d6f379f815d8693bcc9b0607a0e5e89ee499df7a52816911452a854253599f64793841f99703642774108e0606b3c91cee2382d248e556cdf88c5fbc667ea12be01e6921e0a29405cd7d273bbd10cf16e09c26401003683bedcbc38d555708ef4c1117234c8b8c2a14f"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:15:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f0000000180)='./file0\x00', 0x800000161202, 0x40) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc336761a004f4af0, 0x0) ftruncate(r1, 0x200004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="230000006f02000200020300000005000000000000000000000000000000000000000001aadbbea9143ee8579efe3722d6d69833e07921d7b1262d17661481e76b703118e30233f506391af62a0e99b8dbd1eeee623d736df367f2bbae0d104a2cd094cde5b74e8f1a60e22b4320d784b1e467477300"/127], 0x23) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2a0200, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x2) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x400, 0x7, 0xfffffffffffffffd, 0x2, 0x6, 0x80, 0x1, 0x3ff, 0xd9, 0x81}) sendfile(r0, r1, 0x0, 0x800100000000) 23:15:42 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0xf5) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000008}) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0x1ff) dup2(r0, r2) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") [ 395.328375] binder: 15379:15380 ioctl 54a0 0 returned -22 23:15:42 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r1) pkey_free(r1) 23:15:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000040)={0x8, 0x3, [0x4, 0x1, 0x3, 0x8], 0x800}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = getpgrp(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x90) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 23:15:42 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/9) open(&(0x7f0000000100)='./file0\x00', 0x204000, 0x8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r4 = accept(r3, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20005}, 0x4000000) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) lseek(r2, 0x0, 0x3) sync_file_range(r0, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x28) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 23:15:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x1, 0x1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000980)=ANY=[@ANYBLOB]) ioctl$TIOCGSID(r1, 0x5429, 0x0) ptrace$peekuser(0x3, 0x0, 0xb13e) r4 = socket$inet6(0xa, 0x0, 0xffd) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000480)) r5 = dup3(r0, r3, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000140)) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x1, 0x100004) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) 23:15:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) bind(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x87ffd) sendfile(r0, r1, 0x0, 0x800000000024) 23:15:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x7fff, 0xa, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 23:15:45 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) getresgid(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x34, 0x1}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, r0+30000000}, {0x0, 0x9}}, 0x0) 23:15:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0xc02, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x2, 0x73, 0x4, 0x8}, 0x10) 23:15:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000f2b000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0xffffffffffffff83, 0x0, 0x0}) 23:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000011c0)={0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\fc'], 0x1, 0x0, &(0x7f00000001c0)="e8"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)="dd"}) prctl$PR_SET_TSC(0x1a, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) 23:15:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_read_part_table(0x0, 0xfdff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) syz_open_pts(r1, 0x1) 23:15:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0xffffffffffffff84) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x60, 0x0, 0x150) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x5, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="6f315d7aca02f0dc0fa814de6dd41e5a"}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x4a}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @local}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) pwrite64(r0, &(0x7f0000000240)="1727001d31255672742f198222c4a9a39b46d2b5968c3c888148969171347cbdfad656b3bccbd1a3e3b340f06d270a478698f29cb0a4deccb539b192b77b", 0x3e, 0x28) 23:15:45 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) 23:15:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x200000000000011, 0x2, 0xdd86) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) write$P9_RMKNOD(r5, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x8, 0x2, 0x6}}, 0x14) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000080)={0xffffffff, 0x6, 0x800000, 0x5, 0x100000000}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000140)={0x30, 0x5, 0x2, {0x0, 0x0, 0x0, 0x2c}}, 0x4e0) 23:15:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x420a00, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa8, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff153}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff0001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x48180) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socket$netlink(0x10, 0x3, 0x16) mmap$binder(&(0x7f0000f2b000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) [ 398.063502] binder: 15420:15427 ioctl 54a0 0 returned -22 23:15:45 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x28d}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae311c93f10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa662beb127a3d751e96e4985731f95d987c", 0xa5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) wait4(r2, &(0x7f00000001c0), 0x8, &(0x7f00000002c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x280200, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xff, 0x85e, 0x6, 0x9, 0x0, 0x0, 0x100, 0x0, 0x1bd3, 0x400, 0x20, 0xfffffffffffffe01, 0x3, 0x4, 0x5, 0x4, 0x3ff, 0x0, 0x2, 0x4, 0x401, 0x5, 0x0, 0x5, 0x5, 0x7fffffff, 0x1000, 0x40000000000000, 0xfff, 0x7f, 0x8001, 0x9, 0x7, 0x0, 0x8001, 0x7, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x401, 0x0, 0x5, 0x9673, 0x7fff, 0x31f}, r1, 0x4, r3, 0x15) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:45 executing program 5: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) poll(&(0x7f0000000100)=[{r0, 0x2}, {r1, 0x188}, {r0, 0x40}, {r0, 0x8000}, {r2}, {r2}, {r2, 0x4604}], 0x7, 0x1) r3 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x2, 0x8, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @empty, @random="3b6b10288095", @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @random="b331efbd1461"]}) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) getcwd(&(0x7f0000000140)=""/128, 0x80) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet(0x2, 0x4000000000000002, 0x0) sendfile(r2, r3, 0x0, 0x20000102000007) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000280)=""/93, &(0x7f0000000300)=0x5d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200), 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@dev={[], 0x29}]}) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) write$cgroup_type(r6, &(0x7f0000000240)='threaded\x00', 0x9) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000900)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) 23:15:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0xa, 0xf7b, 0x1}) seccomp(0x0, 0x0, &(0x7f0000000040)={0x21b1, &(0x7f0000000000)=[{0x5c}, {0x8000000a, 0x0, 0x0, 0xfffffffffffffffe}]}) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 23:15:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 23:15:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0xa, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:46 executing program 2: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x2f}, {&(0x7f0000000140)="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", 0x118}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x90200, 0xa4) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r4 = accept(r3, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4302130}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x188b502501765b87}, 0x4) 23:15:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000005c0)={0x6, 0x1ff, 0x10001, 0x0, 0x13, 0x8000, 0x6, 0x1, 0x7, 0x86, 0x1f, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000004540)=""/65) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000001180)=[&(0x7f0000000980)='/dev/vga_arbiter\x00', 0x0, &(0x7f0000000c40)='@&{)-!nodevcgroupsystem&-#)eth0\x00', &(0x7f0000000c80)='/dev/vga_arbiter\x00', &(0x7f0000000cc0)='/dev/loop#\x00', &(0x7f0000001140)='posix_acl_accesskeyringGPLwlan1$#\x00'], &(0x7f0000001340)=[&(0x7f0000001200)='/dev/vga_arbiter\x00', &(0x7f0000001240)='/dev/vga_arbiter\x00', &(0x7f0000001280)='/dev/vga_arbiter\x00', &(0x7f0000001300)='user\\\x00'], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000ac0)=""/215, 0xd7}, {&(0x7f0000000bc0)=""/11, 0xb}, {0x0}], 0x4, &(0x7f0000000380)=""/77, 0x4d}, 0xfffffffffffffff7}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002500)=""/73, 0x49}], 0x1, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000003780)={0x77359400}) r4 = memfd_create(&(0x7f0000000e00)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05\xc4\xc5bZ\xe8\xf8\xe5\xde\xb5\x7f3\xc8\x1e\aY\xcf\x15ug=5\xfd\xdd\xd1Gt\xfbI\x97\"\xe8\xca:h\x01\x89\xc6\x89Yj\x80\xf2\xea\xf6\xe6\xc7\t\x1c\xe9x:\xa2\xf2\x8e\x0ep\x98\xf1\\\x90\xd4#\xbb\x0e\xcf\x9f\xf8d\xcf%vD7\xaeN\xf11\xda\xb6\xbf\xe7\x80)\"i\xa6\x111\xc7\xb6\x9b\xa0c\xd4\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000400), 0x20002000006) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) recvmmsg(r3, &(0x7f0000004280)=[{{&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000e80)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/208, 0xd0}, {0x0}], 0x4, &(0x7f00000037c0)=""/155, 0x9b}, 0x4557}, {{&(0x7f0000000f00)=@hci, 0x80, &(0x7f0000003a80)=[{0x0}, {&(0x7f0000003a40)=""/15, 0xf}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c00)=""/193, 0xc1}, {&(0x7f0000003d80)=""/19, 0x13}], 0x2}}, {{&(0x7f0000003e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}}], 0x4, 0x2000, &(0x7f0000004380)={0x77359400}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000043c0)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000280)=0x4) getpgrp(0x0) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x3, 0x3, 0x4}, 0x7}}, 0x18) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000240)={0x3, 0xffffffffffffff12, 0x0, 0x0, 0x1a, 0xff, 0x2, 0xffff, 0xdf71, 0x77822a99, 0x9, 0xe036}) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f00000007c0)) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="b5d2bf3c38f19c0400cd8034"], 0xc}}, 0x0) 23:15:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x199f3c38f916eca1) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000120007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x3, 0x1000000000000000, 0x2, 0x20}, {0x8, 0x1000, 0x7f, 0x40}, {0x7, 0x6, 0x584, 0x4}, {0x20, 0x0, 0x7, 0x592}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x9, &(0x7f00000000c0)=[{0x3f, 0x9, 0x2, 0xfce}, {0x1, 0x5, 0xfa18, 0x1}, {0x1, 0x9, 0x0, 0xa91}, {0x7f, 0x52, 0x7fff}, {0x8, 0x3, 0x7, 0x20}, {0x10000, 0x2, 0x8, 0xffffffffffffffc0}, {0x10001, 0x100000001, 0x9, 0x1}, {0x5f6, 0xfff, 0x2, 0x4c7}, {0x101, 0x4, 0x76, 0x1}]}) 23:15:46 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030a4bdbc855a0ad62e303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000000540), 0x1000) open(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, &(0x7f0000003000), 0x1150) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2, {0x400000000001, 0x0, 0x0, 0x0, 0x0, 0x34d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) [ 399.070847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:15:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280d000000000000000000004000dd3bc678000262a10000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) write$P9_RXATTRCREATE(r4, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r4, &(0x7f0000d83ff8), 0x800000000024) 23:15:46 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x43) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, 0x0, 0x90, 0x0) r2 = dup2(0xffffffffffffffff, r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 23:15:46 executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r2, 0x0, &(0x7f00000007c0)=0xff49) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x41d01) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000cb04", @ANYRES16=r4, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="db5c370342e8000000", @ANYRES16=r4, @ANYBLOB="000126bd7000fbdbdf250700000088000100140002000800030007000000080001001c000000240002000800030040000000080001000d000000080001001400000008000300910900003400020008000200fcffffff080002000500000008000200090000000800030003000000080004000180000008000400feffffff08000300fa000000100001007564703a73797a31000000002c000900080002000e06000008000200080000000800010006000000080002000a00000008000100ff7fffff100007000c000400070000000000000010000600040002000800010080000000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x104, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffc01}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x49001) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="052d2e5ac123cb2612034b45e44c8c24", 0x10) r6 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x8) vmsplice(r6, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) [ 399.195327] selinux_nlmsg_perm: 231 callbacks suppressed [ 399.195337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.230609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.243966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.257438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.273180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.299191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.315446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.331671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 23:15:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x2}}]}, 0x24}}, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000180)="a26bae019a0ba98468576ae2e56480e6acf019b98e51f0c4257dee16f7c763ae2058f46b4a5bf4", 0x27) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) [ 399.336721] binder: 15503:15508 ioctl 54a0 0 returned -22 [ 399.358912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 [ 399.383157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=15497 comm=syz-executor.5 23:15:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0x0, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 399.906285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:15:47 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11193f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) pkey_alloc(0x0, 0x1) 23:15:47 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfe50, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3d2b93c060020cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES32, @ANYBLOB="e6c57c669e382eec5101008ead6686bc0180437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc4c051be926a3c67ed333c960d2bc40dd887fc8dc4872b000100003ba62f5f37d4354f651d00000000f515586de3cd937a8c7c"], 0x0, 0x8c}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:47 executing program 5: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = dup3(r0, r1, 0x64d1bdfb9aef71ba) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r4, 0x0, 0x20, 0x7) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000100)={@loopback, 0x14, r5}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getuid() setreuid(0x0, 0xee00) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') futimesat(r7, 0x0, 0x0) 23:15:47 executing program 0: r0 = syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x80000000, 0x80000000000, 0x8, 0x2, 0x4a8e}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001440)='pagemap\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x80000, 'veth1_to_bridge\x00', 0x4}, 0x18) clock_gettime(0x0, &(0x7f00000013c0)) futimesat(r1, &(0x7f0000001240)='./file0\x00', &(0x7f0000001400)={{}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3b) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r7, 0x0, 0x0) r8 = geteuid() r9 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r12, r10, r11) r13 = gettid() r14 = geteuid() mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40000, &(0x7f0000000900)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303037372c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030342c6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303430302c6d6f64653d30303030cd1227f094983c303030303030303030303030303030303030", @ANYRESDEC=r14, @ANYBLOB=',dont_measure,euid=', @ANYBLOB="66575d1ed290e1dc272c06f5a9173cd658c564b026c222cb98ccf1ae6565d2d51b78dbf35142f529a5ebff1299e0371419a864ef56eb86d0b04072ade2c59ff462e6d8e024c2653db439626a2e6cb6b4a32120abe5702219b3d9e6d818e01c33d7e99c07ef46fa652143931131e809a3827a523b283539e406176ac3bc6b936f8bad3edabd938dd677c5"]) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000200), &(0x7f0000001300)) sendmsg$unix(r2, &(0x7f0000001580)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000001280)="ec1a87539a587701d0b6ada8e818c43813d88cec9508aabe1e5ebc4beb955465f1fa23e4461afff11321c12ae080257606d830fb9c2494e839214b92a112abbd9031e1a1a02c1aa6e827e33b2d81a08ab15db28c28541293a19c7a52dd575d4e712300e843", 0x65}, {&(0x7f0000001480)="0bce7f7c62e63ea359073a66b13c91e49b0cea818a48eb3733a501cd488b863ba3d073a099b5c5e8750965a3b639961b4a2edd50b64228b894301b6b5d5e82f6a25e23038c2f04c9960f8743e815912cf24bd672b7ffabd95f632ba221c304553ba8035ff670421d1643cbaede46d7e7fb9e404ad465b5a16704104ddcbf22acad418ad0d3c8d821f3513e43d8af59c524c4d661c671bc766a25fd49996852a24f94a2e26001f8ca8e08270f5fcee5eddc07a05068810f7ba080834cb0585a6ba2b05be1", 0xc4}], 0x2, &(0x7f0000001340)=[@rights={{0x28, 0x1, 0x1, [r3, r0, r4, r0, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x68, 0x1}, 0x3041) stat(0x0, &(0x7f00000015c0)) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001680)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b200000089704634a410ae246de412156834578c4d321557f83b35d7ac505b340003e23db972e920ac43db237dd5ddc09a52d318ca9fa32f8788ac64e69a1b2ec33fbf3e0633ecdf929c7a3ff59734ce5af1e769ec98c48ab09e3c6233ca3ed44283723257006179d607c2adc5afc27c202434a93feb84ae1698ac95ded796f77d8b4a84670158b23c42a3fe6a16f57033583626265879768bf49167261ea022103c50623b7b08711d1ad23cd7766bb02cd76d641cd6"], &(0x7f0000001780)=0xd6) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) add_key(&(0x7f0000001ac0)='keyring\x00', &(0x7f0000001b00)={'syz', 0x2}, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) [ 400.068885] binder: 15534:15536 ioctl 54a0 0 returned -22 23:15:47 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x4) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xffffffff000}]) 23:15:47 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x400000007, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r2, 0x0, 0x20, 0x7) getsockname(r2, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) write$P9_RLINK(r2, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x2) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) 23:15:47 executing program 3: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='fd\x00\\\xdf\xbb\xd3/\x9a\xfa\x13^Y[\r\x03\xb9\x86#\xcc\x05\x8f3M\x92\xe6\xf4\x1f\x1ap\xb6\xbb~\xbb\xd9&R\x86\xc8\x00\x1a\x8e\xb1K\xdc\x9c.?\xffT\xa9\\q\xd1\xd2,d*\xc3\xed*\xd89c1\xbc\x9b\x1e\xb1*\xb9\x01\xe2;\xeafB\xce_}\xca\xf0]\n\xeb\x9b^\x1a\x1cGr\xf3\xd8\xc7\xd2\xa7W\xea\xb5\x9b\xa1\x887\x99@\f\x92R\xf3\x90&\xe42\xd4\xbaL\x14q\xdf6k\x9bL4\xa8\xe4\xe4\n\x9f\\\xcb\xfb[\xb8\xa6\f|,\x1b\x82\xc5\x0e\a\x84') openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getdents(r2, &(0x7f0000000080)=""/31, 0x17) 23:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5000008912, &(0x7f0000001600)="11dca50d5e0bcfe47bf070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4$packet(r2, &(0x7f0000012540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) r3 = dup2(0xffffffffffffffff, r2) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 23:15:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) gettid() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) r2 = geteuid() fchown(r1, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r0, 0x5502) 23:15:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)={0x150, r2, 0x4dca92fae2b1bf3c, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x5, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x29}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xfddb, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000081}, 0x4008001) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x6f, 0xc1, 0x1, 0x2539, 0xff, 0x7}) 23:15:48 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xfffffffffffffffc) sendto(r0, &(0x7f0000000280)="8863c869059e6cce15fd2ddfacbe6f0afd9ed268ba34bd0a41ffc1d7afabc7b0a977fc9c3a47c1699dfdb339449d75948a85069dcbbd0376fb1c10e07638e4396ec947f8e55c1459a5d23b096d495a340a56487914a7d53a6aa4ae5edef66ed58f3369e3917237866ae1d0a2b741dccf3e6ed8901be1e3670f709a5c8a664d07a3e7d2c73693099ecb64af10542d16595845ac3f74a638bfc1d1d6dbcaf2a89479f0cdc7ed7338388bf3cc9f68cdbaf29dc199a3ee715e71fab1b898f91bbca71d964486b3525ea6a2dfdee33023acc2d91808c596d7e682cc19bf58fcf8526996034f586ca23e", 0xe7, 0x80, &(0x7f0000000080)=@in={0x2, 0x20, @multicast2}, 0x80) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 23:15:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0x0, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x2800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000200)) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r1, r0, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000240)={0x7, 0x2}) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sendmsg$nl_netfilter(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0xd, 0x4, 0xef511c80a6c5602d, 0x70bd25, 0x25dfdbfd, {0xe, 0x0, 0xa}, [@generic="7642297c884a116ada1e7bf24d7e9b24e98cf81a0896fb1f813dda91b7a2625a9fd9b1af8f9ec13b58a7c4360ea8651c21a0ab2b"]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 23:15:48 executing program 2: request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) unshare(0x20600) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0, 0x198}, {0x0, 0x199}, {&(0x7f0000000240)=ANY=[], 0x12a}], 0x4, 0x0, 0xfffffffffffffd6d}, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x31) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:15:48 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825a55f910c28f5e87a64820546a1ebed56adbd5b57f67b95778e2569f8e39808e0b61a0bf6a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd113acf060c105020d4882fc399eaab8787f0db6510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d40d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea9424959d9ee275d661bd3c48f4855d4bd33886271153f162b6d3cbf14", @ANYRES16=0x0, @ANYPTR64, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="e0c55c5d9eb82ee4d00100010029a741efca44f937d049248204007296d961244e2e0c734057548c402dc43b3897cc275fd87f333c9631b8c40dd887fc8dd4f9ad4c079521dfdaf3d0fe0900000000000000", @ANYRESHEX], 0x0, 0x165}, 0x20) tkill(r0, 0x39) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:48 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) timer_create(0x4, &(0x7f0000000040)={0x0, 0xb, 0xd, @thr={&(0x7f0000000340)="f9348b9aff672f2994f8c7ff762c39fd7633cd40ec99f50a3f98cfa444b2a86359ee6a2b11b1018096e9e9079daa269a3a157966850c3c3c2c8253a78afa4dae26e8b678b038b77ce09381b9fc084f9f99be71d7b38e0b1b460902489926646d38155ced62419dac87ac7fa9ac4982faf8b6d4c6061d01b073fb0611e86f4a2734820f091671b2a1ca375c9324c6707292001136626f990c52edd556b15827ea7814dd9a2a991248e959cfbbddbc90ecdd5c6b", &(0x7f0000000400)="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"}}, &(0x7f00000000c0)) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=@raw=[@generic, @map={0x18, 0x0, 0x1, 0x0, r0}, @exit, @generic={0x1, 0x3f, 0xfffffffffffffc01, 0x2, 0xf5a0}], &(0x7f0000000080)='GPL\x00', 0x800, 0xb0, &(0x7f0000000280)=""/176, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 23:15:48 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1, 0x100000001, 0x5, 0xcd, 0x0, 0x3, 0x8, 0x8, 0x2, 0x5, 0xfffffffffffff801, 0x4, 0x4, 0xe0, 0x10001, 0x8, 0xfffffffffffffff8, 0x3, 0x9, 0x80000000, 0x3, 0xfe00000000000000, 0x8, 0x5, 0xb6, 0x5, 0x80000000, 0x4, 0x5, 0x9, 0x5ac, 0x9, 0x3, 0xffffffff, 0x9, 0x6, 0x0, 0x6, 0x3, @perf_config_ext={0x8001, 0x5}, 0x0, 0x6, 0x1, 0x3, 0x5, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r0 = gettid() tkill(r0, 0x16) 23:15:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write$P9_RREAD(r2, &(0x7f0000000080)={0x78, 0x75, 0x1, {0x6d, "7ddfbe0ced87f5a72e59f24d1c042dff9a550125e4d5ee120b7fab599ef421e41c41daabe183657b8dbba17a631ecc9943dda0ad8d3d374bfb40052a99c2c46b819d0d2ee77b50db562c8a9b473841cce0c58a34b9680681d46720c17b620f72b98fec16875169eb3d5605dbcc"}}, 0x78) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10200, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80) setsockopt$inet_mreqsrc(r3, 0x0, 0xb4255858a7391c4f, &(0x7f0000000200)={@multicast2, @local, @broadcast}, 0xc) [ 401.425513] binder: 15734:15739 ioctl 54a0 0 returned -22 23:15:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1003e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) geteuid() syz_emit_ethernet(0x211d49, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/731], 0x0) 23:15:49 executing program 0: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="d3d2b93c929e00cd80"], 0x9}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb11", @ANYRESHEX], 0x0, 0xf5}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0x0, 0x3, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f00000012c0)={0x2, 0x0, @local}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000300)={0x4, 0x20, 0x8, 0x5, 0x7f, 0x3ff}) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x12, 0x2, 0xa00, 0x70bd2d, 0x25dfdbff, {0xd}, [@typed={0x8, 0x6a, @u32=0xb}, @generic="2317a0440488fb7761f3e65252506aa9f8fed7dd7600feeab0571c59f77e9a7ab263a3ef38e89695b0990e2868f367827721cbb9ed519397679a2b2db6a0f0b85a2a9972533b0d48bfc808ac6ec42e66619888e7781fc404f76742d4f7ebccb6fdcda90e012ef70e0466eca463fbb728e51efe81ae48be38dcd6ed6943869c7a329a9c05d6e61ed1816b1ca23b2e7b8102f188a459fb72c3caa712511fcabf9b01830f670f0cdb930b55b46ad3062618a2b682a04b0d65d32354213db1981dce42e8cd0e9cb04eab2292398717675886fb2a7252b56efd999ef8f004e7ea6e275b27f41b0a917753045556a6fa381719"]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000050}, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="fe49fc16d55fee24e60000fddc0fe2910be81084"], 0x14) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 23:15:49 executing program 3: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xe}}, 0x0) syz_open_procfs(0x0, &(0x7f0000001300)='map_files\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x10000000001c) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, r0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$cont(0x7, r0, 0x0, 0x0) [ 402.520517] EXT4-fs warning (device sda1): verify_group_input:102: Cannot add at group 4 (only 16 groups) [ 402.594231] binder: 15785:15786 ioctl 54a0 0 returned -22 23:15:50 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b3, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_addrs=@sco={0x1f, {0x0, 0x0, 0x0, 0x3, 0x0, 0x4}}}) select(0x40, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x83, 0x32fc}, 0x0, 0x0, 0x0) clone(0x24001000, 0x0, &(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xc, 0x80000004, 0x4, 0x8000, 0x7ffffffe, 0xfff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200), 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r3, 0x0, 0x20, 0x7) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000480)) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) r4 = socket(0x2, 0x3, 0x100000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) accept$unix(r4, 0x0, &(0x7f00000007c0)=0xff49) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="ff015828946546c5b76982f964f356adb6d360047b20f21340afdf08cde1c22ffb22d9fc8a364a3ab9ed7202c6c8510ad7f8b531cb7a0369ccc7fce027e31b2e85e75e7c5768850a9ac1503370013aafe4fc8b3b19e9f042", @ANYRES16, @ANYBLOB="000328bd7000fbdbdf25160000007c00050008000100756470000800010065746800080001006962000008000100696200001c0002000800010011000000080004000200000008000400000000001c00020008000400421300000800040008000000080002000600000008000100756470000c00020008000300200000000400020008000100696200000c0002000800020040000000"], 0x3}, 0x1, 0x0, 0x0, 0x50}, 0x4) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00C\x00\b\x00\x00\x00\x00pi', @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf250f0000001c0001000800030005000000100001007564703a73797a310000000038000100100001007564703a73797a300000000024000200080004000100000008000300030000000800040040000000080004005ca90000"], 0x68}, 0x1, 0x0, 0x0, 0x14004000}, 0x80) write(r1, &(0x7f0000000340), 0x41395527) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/mls\x00', 0x0, 0x0) r6 = accept(r5, &(0x7f0000000240)=@l2, &(0x7f0000000680)=0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'nlmon0\x00'}}}, ["", "", ""]}, 0x2c}}, 0x800) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xd4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x860) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x8, 0x5, 0x7fffffff) 23:15:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xf412, 0xfffffffffffff001, 0x1, 0x435b, 0x2, 0x800}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) 23:15:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000180)=0x54) socket$inet6(0xa, 0x5, 0xff) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000200)='stack\x00') socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000140)) unshare(0x20600) geteuid() r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x6, 0x10080) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000040)=""/65) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) bind(r3, 0x0, 0xffffffb7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x0) 23:15:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x0, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 23:15:51 executing program 4: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) preadv(r0, &(0x7f0000001380), 0x1000000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 404.400378] binder: 15823:15824 ioctl 54a0 0 returned -22 23:15:51 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x2002, 0x0) write$selinux_attr(r0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@initdev, @multicast1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(r0, &(0x7f0000004ac0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x8000000004e20, 0x6bf}, 0x1c) sendto$inet6(r2, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0xffffffffffffffff}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(&(0x7f00000003c0)='./bus\x00') ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000002c0)=""/170) clock_adjtime(0x7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000440)=@fragment, 0x8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, 0x0, 0x8040fffffffd) 23:15:51 executing program 2: r0 = epoll_create1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) write$tun(r1, &(0x7f0000000040)={@void, @void, @x25={0x2, 0x100000000, 0x12, "d15da9e990"}}, 0x8) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) write(r2, &(0x7f00000000c0)="8739d00d038d85751a338932f9c8e7401552e42b68cc88c1a675540dd7a25fec8b50b54165ec610eac45352eb755cfda90618a3af37a8fd717d79a8ba632080538ea4970c0477cfabb2b9d733dcc57a58f66fd512a2e131cfbedd6daf4", 0x5d) fcntl$lock(r0, 0x400000007, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff}) 23:15:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {0xffff}, {}, 0x0, 0x0, 0xa, 0xd104}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 23:15:52 executing program 0: r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0) syz_open_procfs(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@isdn, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) recvfrom$unix(r0, &(0x7f0000000140)=""/127, 0x7f, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchownat(r3, &(0x7f00000001c0)='\x00', 0x0, 0x0, 0x1000) lsetxattr$security_ima(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.ima\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0401ddae46fdff"], 0x7, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f0000000540)={'L+', 0x1}, 0x28, 0x0) fsetxattr$trusted_overlay_origin(r1, 0x0, 0x0, 0x0, 0x0) 23:15:52 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7a5b7f649b189d8f1e87738c76cf8a8e4"], 0x0, 0x39}, 0xffffffc1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x0, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 405.382628] binder: 15845:15846 ioctl 54a0 0 returned -22 23:15:52 executing program 3: futex(0x0, 0x8c, 0x0, 0x0, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x2) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x5000000000016) 23:15:52 executing program 4: syz_read_part_table(0x0, 0xaaaab89, &(0x7f0000000200)=[{&(0x7f0000000080)="02000500000001000000ff07000000000000630000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11c0a50d5ed1ad642115d315833c090bcfe47bdf80") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xc9a8cad4626c7632, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="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") 23:15:52 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r0, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r0, 0x0, 0x20, 0x7) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3b) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getuid() r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') fchown(r6, r4, r5) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={r1, r2, r5}, 0xc) 23:15:52 executing program 0: ustat(0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000140)='./file0/../file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100032, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='aio\x00', 0x0, 0x0) getpgrp(0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$net_dm(0x0) 23:15:52 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000180)=0x17642c1) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1, 0x0) r1 = gettid() r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) fsetxattr$security_evm(r2, &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "425f9947753230a4f0"}, 0xa, 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getresgid(&(0x7f0000000100), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="ae", 0x1}], 0x1, 0x0) 23:15:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0xd10f7d1114d3995d, r0, 0x0) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x333453ea6d470b77) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:15:52 executing program 0: r0 = memfd_create(&(0x7f0000000140)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4008000080000200040100000000"], 0xe) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 405.722890] loop4: p1 < > p2 [ 405.726404] loop4: partition table partially beyond EOD, truncated 23:15:53 executing program 2: r0 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000600)="c340", 0x2, 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) write(r0, &(0x7f0000000080)="c1", 0x1) sendto$inet(r0, &(0x7f0000000040)="eb", 0x1, 0x1, 0x0, 0x0) [ 405.745337] loop4: p1 start 1 is beyond EOD, truncated [ 405.827369] loop4: p2 size 327680 extends beyond EOD, truncated 23:15:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe000000008500000012000000b70000000000000095000000000000004e62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = inotify_init() readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1) memfd_create(0x0, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r2, 0x0, 0x20, 0x7) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x20012, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)={{0x108, 0xcf46, 0x9, 0x18e, 0x393, 0x7fff, 0x0, 0x1}, "0a311340f457d1281040f7bfabf4b09a65da1dd779071ac3418b5550807237022fb44e3373b8512127f527e077c81fab64ee04aa6af764eae34826d0ef9d617acfe21eeb56dd12ec83953b23a35269affbcf756986cf", [[], [], []]}, 0x376) 23:15:53 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000540)=ANY=[@ANYBLOB], 0x7, 0x0) waitid(0x1, r3, &(0x7f0000000280), 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r5, &(0x7f0000000200)=ANY=[], 0x5aa78d33) llistxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/154, 0x9a) sync_file_range(r5, 0x0, 0x20, 0x7) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000400)=""/41) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x109) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x44010, r6, 0x48) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) r7 = syz_open_pts(r1, 0x0) fdatasync(r1) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r7, 0x5412, 0x0) 23:15:53 executing program 2: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)='>x\t', 0x3}], 0x3}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca3375ec3ef649b189d18ee3bd21148f52a8e40ead6546ab973248041a21ba892d95d2ceca9e5c238b2cd9c51d70928ca80355a99b25586f406eefe07c96511847b726027cdc0caad2369e4c4abe6a366cf54e7b6ec30a5a014f2494767dac86da514fa34a397948cb5aa9021aa38e5d8d61a3d2568cd128e1acb8c5dc5c1c9fc12a4df5c1926fecb86367f80c14adc44d1fd257b1c01f25fe82371f41a5817cc4d539d4b38f933db67082a71ee953e3a6f25081a2ae6136a39b50bf9acccb3e26a009fca93499c137f4d4b82803b71b50ac711853cbd622b47ee00f1a1fbb6b045a1a81a9"], 0x0, 0xf6}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000480), 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000000000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x440, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x0, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x4394, 0x8001, 0x4, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x5, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) sync_file_range(r5, 0x0, 0x20, 0x7) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r6, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r6, 0x0, 0x20, 0x7) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = openat$cgroup_ro(r4, &(0x7f0000000700)='memory.e_ents\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0xff4a) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x20032600) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x6de}}, ["", ""]}, 0x24}}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 406.504308] loop4: p1 < > p2 [ 406.509970] loop4: p2 size 327680 extends beyond EOD, truncated 23:15:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x80000000000003, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) [ 406.634917] binder: 15914:15919 ioctl 54a0 0 returned -22 23:15:53 executing program 5: prctl$PR_MCE_KILL(0x35, 0x0, 0x8) pipe(&(0x7f0000000000)) 23:15:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in=@dev, {}, {0x13}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r1, 0x0, 0x20, 0x7) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x101800, 0x40) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x5, 0x10, 0x1, r2}) 23:15:53 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0xa, "6922900dce07442250683c3a50aceba541b640"}, 0x15, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2a9}, 0x0) shutdown(r0, 0x0) 23:15:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0) r1 = getuid() r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r5, r3, r4) chown(&(0x7f0000000040)='./file1\x00', r1, r4) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x3e) recvfrom$unix(r8, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r7, 0x8, r6) fcntl$setsig(r7, 0xa, 0x12) dup2(r7, r8) tkill(r6, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 23:15:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x9b, 0x612, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xc0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) dup2(r0, r1) 23:15:54 executing program 5: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x200, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$P9_RREAD(r4, &(0x7f0000000200)=ANY=[], 0x5aa78d33) sync_file_range(r4, 0x0, 0x20, 0x7) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r6 = geteuid() sendmsg$nl_xfrm(r3, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="d40100001a00010125bd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2000084e2200000a00402000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="fe8000000000000000000000000000bb000004d533000000000000000000000000000000000000012300000000000000ff7f00000000000000000000000000000300000000000000ea8a076800000000060000000000000000000000000000006500000000000000b10a000000000000ff03000000000000010100000000000000800000000000008000000000000000080000002bbd7000003500000200520808000000000000000c00100000000000000000007400010067686173682d636c6d756c6e6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050010000b4a806e506fa91b7b8f3f5cb3f3cd5d8f0d60007bba2bfdb5a4d074856d35132da39ce4b84dfc9c69f3d0000640014007368613232342d737373653300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b800000000020000bfd6f0ae8412640c73cc99d69b8e60e5345594dac7699c0048f288ff0fec9f55fac1d1e60aade7bffc170852557b4f94dd69230009c8821c95d78e1c0431c57d3c77de7b6718dce2b93e1241b3f440404e4ec5b7501131d92add39bc5024b6dfe9d84f8ccfcaeeff136ae0a3168eacdbf012af4ecec57137ca46b44aa1faff9ed88657c041ee"], 0x1d4}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000c80)="f6", 0x1}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) r7 = gettid() unlink(&(0x7f0000000100)='./file0\x00') timer_create(0x2, &(0x7f0000000040)={0x0, 0x29, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_gettime(r8, &(0x7f00000000c0)) timer_delete(r8) timer_settime(r8, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1004000000013) 23:15:54 executing program 3: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\xdf\xd8\x00', 0x1}, 0x15) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/142) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 23:15:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) [ 411.392321] ------------[ cut here ]------------ [ 411.397152] WARNING: CPU: 0 PID: 2107 at net/xfrm/xfrm_state.c:2192 xfrm_state_fini+0x2a0/0x340 [ 411.406675] Kernel panic - not syncing: panic_on_warn set ... [ 411.406675] [ 411.414196] CPU: 0 PID: 2107 Comm: kworker/u4:2 Not tainted 4.9.191+ #0 [ 411.420954] Workqueue: netns cleanup_net [ 411.425129] ffff8801a2d97900 ffffffff81b67171 0000000000000000 ffffffff82a3b340 [ 411.433163] 00000000ffffffff 0000000000000000 0000000000000009 ffff8801a2d979e0 [ 411.441176] ffffffff813ff0ca 0000000041b58ab3 ffffffff82e32ec5 ffffffff813feef1 [ 411.449227] Call Trace: [ 411.451796] [<0000000080728c64>] dump_stack+0xc1/0x120 [ 411.457138] [<000000001b9910d4>] panic+0x1d9/0x3bd [ 411.462134] [<0000000026255d68>] ? add_taint.cold+0x16/0x16 [ 411.467924] [<00000000a83c0325>] ? __warn.cold+0x14/0x2f [ 411.473464] [<00000000e0b9c1a9>] ? xfrm_state_fini+0x2a0/0x340 [ 411.479510] [<0000000010278f8e>] __warn.cold+0x2f/0x2f [ 411.484853] [<000000008230eabf>] warn_slowpath_null+0x2d/0x40 [ 411.490799] [<00000000e0b9c1a9>] xfrm_state_fini+0x2a0/0x340 [ 411.496673] [<0000000033523e08>] xfrm_net_exit+0x2e/0x40 [ 411.502197] [<000000007ba9b755>] ? xfrm_policy_fini+0x320/0x320 [ 411.508332] [<00000000c762a769>] ops_exit_list.isra.0+0xb0/0x160 [ 411.514539] [<00000000aa529a31>] cleanup_net+0x3d6/0x8a0 [ 411.520054] [<000000002ccd3e24>] ? process_one_work+0x7aa/0x1600 [ 411.526267] [<0000000058adccfe>] ? net_drop_ns+0x80/0x80 [ 411.531797] [<000000001eafaf4d>] process_one_work+0x88b/0x1600 [ 411.537843] [<00000000a202fdbc>] ? process_one_work+0x7ce/0x1600 [ 411.544054] [<000000002dd61fa6>] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 411.550523] [<00000000d56c8f1d>] ? _raw_spin_unlock_irq+0x28/0x60 [ 411.556827] [<00000000244daa7b>] worker_thread+0x5df/0x11d0 [ 411.562601] [<00000000b3e75e67>] ? process_one_work+0x1600/0x1600 [ 411.568897] [<00000000a39d49d1>] kthread+0x278/0x310 [ 411.574079] [<00000000a304b445>] ? kthread_park+0xa0/0xa0 [ 411.579681] [<000000002d4e03a6>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 411.586416] [<00000000ea593de1>] ? _raw_spin_unlock_irq+0x39/0x60 [ 411.592725] [<0000000012a9ba8c>] ? finish_task_switch+0x1e5/0x660 [ 411.599031] [<000000005a411bb1>] ? finish_task_switch+0x1b7/0x660 [ 411.605346] [<000000004dce5295>] ? __switch_to_asm+0x41/0x70 [ 411.611210] [<0000000065f4e7c2>] ? __switch_to_asm+0x35/0x70 [ 411.617073] [<000000004dce5295>] ? __switch_to_asm+0x41/0x70 [ 411.622937] [<00000000a304b445>] ? kthread_park+0xa0/0xa0 [ 411.628536] [<00000000a304b445>] ? kthread_park+0xa0/0xa0 [ 411.634145] [<000000005bf62ae8>] ret_from_fork+0x5c/0x70 [ 411.640491] Kernel Offset: disabled [ 411.644135] Rebooting in 86400 seconds..