c0, 0x6, "50cd9b65959d274a93fe7de60fb90461703271e45330f46a5689b306810343f037d60500f0cbb0f7a09f649ba57ecdecaca59f6405c72ff4a4e87a4feb5777cba87522551ae76d0df60e5651e6f678da2b54ff92ad165a181ba89ed0afcabe9b9c1f974d658990dd673353c2229102f838a06b1167158a55a59c894b726c70fb7326cabe05ec271fbafc42c13ec063a9ba1445ae3d8375a8d803a9bb5c89b96983d6c99e6e4d14e7906920594fe729fd2d89f6ccb7e0af027e"}}}}, {0x40, 0x1, @m_mirred={0x3c, 0xa, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x0, 0x2dfa, 0x68d}, 0x3, r3}}}, {0x4}}}}, {0xd4, 0x1, @m_sample={0xd0, 0xe, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xff}]}, {0xa0, 0x6, "da8e6f3c0000a224c647c55cd2efa135605d3592169784e327674a0fadb67a3586d675297a58c03dba590b04675d5e83b522c7e46d8b0be437746bed0e8be19ee02b1019700de1ce763fe61e96ad1085e58d708312bf9053c835f5b2326f17d0c8aaaeda48cacbb11750562c7ef1dec7485e3da2172bfb6141019ee763b3469084f8fbd16739d81ab4795d58ca783a6fbfda4f0f9a507f051caae0"}}}}, {0x1060, 0x1, @m_bpf={0x105c, 0xb, {{0x8, 0x1, 'bpf\x00'}, {0x48, 0x2, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x100000001, 0x1, 0x64, 0x1}, {0x46, 0x1000, 0xcc4, 0x80000000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x6, 0x50a7, 0x100}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7f, 0xffffffffffffffff, 0x0, 0x5}}]}, {0x1004, 0x6, "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"}}}}]}, 0x1280}, 0x1, 0x0, 0x0, 0x8000}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x1, 0x0, 0x10000101) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000540)=""/246) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r6, r5, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800, 0x0) fcntl$addseals(r7, 0x409, 0x1000000000) 00:25:10 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/checkreqprot\x00', 0x2, 0x0) memfd_create(&(0x7f0000001840)='vwlan0\x00', 0x1) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001880)='/selinux/access\x00', 0x2, 0x0) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42a8845}, 0xc, &(0x7f0000001780)={&(0x7f00000001c0)=@newtaction={0x1280, 0x30, 0x305, 0x70bd26, 0x25dfdbfe, {0x0, 0x1, 0x3}, [{0xf8, 0x1, @m_vlan={0xf4, 0x1e, {{0xc, 0x1, 'vlan\x00'}, {0x20, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xadb1, 0x0, 0x10001, 0x1}, 0x1}}]}, {0xc0, 0x6, "50cd9b65959d274a93fe7de60fb90461703271e45330f46a5689b306810343f037d60500f0cbb0f7a09f649ba57ecdecaca59f6405c72ff4a4e87a4feb5777cba87522551ae76d0df60e5651e6f678da2b54ff92ad165a181ba89ed0afcabe9b9c1f974d658990dd673353c2229102f838a06b1167158a55a59c894b726c70fb7326cabe05ec271fbafc42c13ec063a9ba1445ae3d8375a8d803a9bb5c89b96983d6c99e6e4d14e7906920594fe729fd2d89f6ccb7e0af027e"}}}}, {0x40, 0x1, @m_mirred={0x3c, 0xa, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x0, 0x2dfa, 0x68d}, 0x3, r3}}}, {0x4}}}}, {0xd4, 0x1, @m_sample={0xd0, 0xe, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xff}]}, {0xa0, 0x6, "da8e6f3c0000a224c647c55cd2efa135605d3592169784e327674a0fadb67a3586d675297a58c03dba590b04675d5e83b522c7e46d8b0be437746bed0e8be19ee02b1019700de1ce763fe61e96ad1085e58d708312bf9053c835f5b2326f17d0c8aaaeda48cacbb11750562c7ef1dec7485e3da2172bfb6141019ee763b3469084f8fbd16739d81ab4795d58ca783a6fbfda4f0f9a507f051caae0"}}}}, {0x1060, 0x1, @m_bpf={0x105c, 0xb, {{0x8, 0x1, 'bpf\x00'}, {0x48, 0x2, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x100000001, 0x1, 0x64, 0x1}, {0x46, 0x1000, 0xcc4, 0x80000000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7ff, 0x6, 0x50a7, 0x100}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7f, 0xffffffffffffffff, 0x0, 0x5}}]}, {0x1004, 0x6, "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"}}}}]}, 0x1280}, 0x1, 0x0, 0x0, 0x8000}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x1, 0x0, 0x10000101) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000540)=""/246) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r6, r5, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x800, 0x0) fcntl$addseals(r7, 0x409, 0x1000000000) 00:25:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x1c) 00:25:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="d92379bbe8026e32fa573ef221f76dbb5f900411d918a0a518cac3cf1a25e1868e0ba74d93e2f88491f58bca45c2a283a4fe3013fa19e1501ef5b91c3c41e1fba9a9c3f8ce81", 0x46}], 0x1) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000480)) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r2) flock(r5, 0x5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000003c0)=0x44) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r6, r10, &(0x7f0000000080), 0x80000003) 00:25:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="d92379bbe8026e32fa573ef221f76dbb5f900411d918a0a518cac3cf1a25e1868e0ba74d93e2f88491f58bca45c2a283a4fe3013fa19e1501ef5b91c3c41e1fba9a9c3f8ce81", 0x46}], 0x1) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000480)) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r2) flock(r5, 0x5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000003c0)=0x44) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r6, r10, &(0x7f0000000080), 0x80000003) 00:25:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000140)=""/81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 00:25:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x1c) 00:25:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="d92379bbe8026e32fa573ef221f76dbb5f900411d918a0a518cac3cf1a25e1868e0ba74d93e2f88491f58bca45c2a283a4fe3013fa19e1501ef5b91c3c41e1fba9a9c3f8ce81", 0x46}], 0x1) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000480)) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r2) flock(r5, 0x5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000003c0)=0x44) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r6, r10, &(0x7f0000000080), 0x80000003) 00:25:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="d92379bbe8026e32fa573ef221f76dbb5f900411d918a0a518cac3cf1a25e1868e0ba74d93e2f88491f58bca45c2a283a4fe3013fa19e1501ef5b91c3c41e1fba9a9c3f8ce81", 0x46}], 0x1) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000480)) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r2) flock(r5, 0x5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000003c0)=0x44) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r6, r10, &(0x7f0000000080), 0x80000003) 00:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 00:25:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000340)=0x110) r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000fa4000)={0x0, r3}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000003c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x82) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000380)) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000380)}], 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) prctl$setname(0xf, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="d0ed87c211dedc207e4ff4fd76914e3a6f4a8e3657d179f8014344235e541eef15c823fdb19b777b963c57fa16a4ef83b64e190340367459d7d693bb95635e6a03c9a9197697ba4ce8537505f18d5e4f0edd53726ec9a3a37c07c8b5dadf6aa3fe02824fcf441dc36ecc21c67938bd035cd4ea91e1a28699afcc91cd040d1a0470a3327d"]) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0x8) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) 00:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:11 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 00:25:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000000c0)={0x42a4ae, {0xffffffbfffbff270}}, &(0x7f0000000600), 0x8, &(0x7f0000000100)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="d92379bbe8026e32fa573ef221f76dbb5f900411d918a0a518cac3cf1a25e1868e0ba74d93e2f88491f58bca45c2a283a4fe3013fa19e1501ef5b91c3c41e1fba9a9c3f8ce81", 0x46}], 0x1) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000440)='/dev/pktcdvd/control\x00', 0xc00, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000480)) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000011c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r2) flock(r5, 0x5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r6 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r6, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000003c0)=0x44) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r6, r10, &(0x7f0000000080), 0x80000003) 00:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000001280)=0x1000, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 00:25:12 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:12 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 00:25:12 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x0) unshare(0x20020400) readv(r0, &(0x7f0000000200), 0x0) 00:25:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x1c) 00:25:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x23, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 00:25:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@empty, 0x0, r1}) 00:25:12 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x4a48b125e136573}) 00:25:12 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x0) unshare(0x20020400) readv(r0, &(0x7f0000000200), 0x0) 00:25:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x23, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) [ 1513.571381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1513.577962] IPv6: NLM_F_CREATE should be set when creating new route [ 1513.584481] IPv6: NLM_F_CREATE should be set when creating new route 00:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000001280)=0x1000, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 00:25:12 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"0000000000000000000000000200", 0x4fff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 00:25:12 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x4a48b125e136573}) 00:25:12 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x0) unshare(0x20020400) readv(r0, &(0x7f0000000200), 0x0) [ 1513.680758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:25:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x23, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 00:25:12 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x4a48b125e136573}) [ 1513.813448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:25:12 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:12 executing program 1: r0 = open(&(0x7f0000000380)='./file0\x00', 0x8040, 0x0) unshare(0x20020400) readv(r0, &(0x7f0000000200), 0x0) 00:25:12 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:12 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000280)=ANY=[]) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) getpgid(r1) 00:25:12 executing program 0: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x4a48b125e136573}) 00:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000001280)=0x1000, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 00:25:12 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x23, 0x0, 0x0, {0xa, 0xfe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 00:25:12 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1513.957208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 00:25:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) read$FUSE(r2, &(0x7f0000001040), 0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 00:25:12 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 00:25:12 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:12 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) 00:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000001280)=0x1000, 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 00:25:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) [ 1514.064004] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop7 00:25:12 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) [ 1514.269189] IPVS: Creating netns size=2536 id=227 00:25:13 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000080), 0x4) [ 1514.298529] BTRFS error (device loop7): superblock checksum mismatch [ 1514.435944] BTRFS error (device loop7): open_ctree failed 00:25:13 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000280)=ANY=[]) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) getpgid(r1) 00:25:13 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) [ 1514.519729] IPVS: Creating netns size=2536 id=228 00:25:13 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:13 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:13 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:13 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000778000)={0x2, 0x1, @loopback}, 0x10) 00:25:13 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:13 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) [ 1514.651106] BTRFS error (device loop7): superblock checksum mismatch 00:25:13 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000000c0)) 00:25:13 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) 00:25:13 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000000c0)) 00:25:13 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000000c0)) 00:25:13 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000140)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f00000000c0)) [ 1514.862710] BTRFS error (device loop7): open_ctree failed 00:25:13 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000280)=ANY=[]) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) getpgid(r1) 00:25:13 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:13 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1515.074424] BTRFS error (device loop7): superblock checksum mismatch [ 1515.121052] BTRFS error (device loop7): open_ctree failed [ 1515.378531] IPVS: Creating netns size=2536 id=229 00:25:14 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) 00:25:14 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:14 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:14 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:14 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) [ 1515.466733] IPVS: Creating netns size=2536 id=230 00:25:14 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:14 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40001000000, 0x10, r4, 0x40000000000) r5 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfff, 0x20800, 0x2, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x9948, 0xffffffffffffff2d, 0x4, 0x0, 0x401, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000, 0x7fff, 0x0, 0x64, 0x6, 0x1, 0x3, 0xff, 0x7, 0x7, 0x9, 0x253, 0x6, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x10c8e, 0x100000001, 0x0, 0x7, 0x5, 0x7, 0x684e84f7}, r5, 0x10, 0xffffffffffffffff, 0x2) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x0) mmap(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0x40000000000008, 0x10, r3, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:14 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:25:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000180)) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) 00:25:14 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 00:25:14 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000280)=ANY=[]) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) getpgid(r1) 00:25:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:14 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x61, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 00:25:14 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x61, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 00:25:14 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) [ 1515.872683] BTRFS error (device loop7): superblock checksum mismatch [ 1516.041383] BTRFS error (device loop7): open_ctree failed [ 1516.539202] pktgen: kernel_thread() failed for cpu 0 [ 1516.544600] pktgen: Cannot create thread for cpu 0 (-4) [ 1516.550120] pktgen: kernel_thread() failed for cpu 1 [ 1516.555379] pktgen: Cannot create thread for cpu 1 (-4) [ 1516.561066] pktgen: Initialization failed for all threads [ 1516.919285] pktgen: kernel_thread() failed for cpu 0 00:25:15 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:15 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x61, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 00:25:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:15 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 00:25:15 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40001000000, 0x10, r4, 0x40000000000) r5 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfff, 0x20800, 0x2, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x9948, 0xffffffffffffff2d, 0x4, 0x0, 0x401, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000, 0x7fff, 0x0, 0x64, 0x6, 0x1, 0x3, 0xff, 0x7, 0x7, 0x9, 0x253, 0x6, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x10c8e, 0x100000001, 0x0, 0x7, 0x5, 0x7, 0x684e84f7}, r5, 0x10, 0xffffffffffffffff, 0x2) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x0) mmap(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0x40000000000008, 0x10, r3, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:15 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:15 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) [ 1516.946136] pktgen: Cannot create thread for cpu 0 (-4) [ 1516.952318] pktgen: kernel_thread() failed for cpu 1 [ 1516.957493] pktgen: Cannot create thread for cpu 1 (-4) [ 1516.970842] pktgen: Initialization failed for all threads 00:25:16 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x7ff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x40000000, &(0x7f00000002c0)="5ddaa538a3d8d8c76c7862e672b023186e7a054a", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/213, &(0x7f0000000200)=0xd5) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000300)=""/240) 00:25:16 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x61, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 00:25:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:16 executing program 6: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) read(r0, &(0x7f00000004c0)=""/230, 0xffffff9b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) 00:25:16 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40001000000, 0x10, r4, 0x40000000000) r5 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfff, 0x20800, 0x2, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x9948, 0xffffffffffffff2d, 0x4, 0x0, 0x401, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000, 0x7fff, 0x0, 0x64, 0x6, 0x1, 0x3, 0xff, 0x7, 0x7, 0x9, 0x253, 0x6, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x10c8e, 0x100000001, 0x0, 0x7, 0x5, 0x7, 0x684e84f7}, r5, 0x10, 0xffffffffffffffff, 0x2) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x0) mmap(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0x40000000000008, 0x10, r3, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:16 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) 00:25:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) 00:25:16 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2000000000a, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) dup3(r2, r1, 0x0) [ 1518.753289] pktgen: kernel_thread() failed for cpu 0 [ 1518.758460] pktgen: Cannot create thread for cpu 0 (-4) [ 1518.764507] pktgen: kernel_thread() failed for cpu 1 [ 1518.769651] pktgen: Cannot create thread for cpu 1 (-4) [ 1518.775077] pktgen: Initialization failed for all threads [ 1519.028934] pktgen: kernel_thread() failed for cpu 0 00:25:17 executing program 4: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000000, 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00') 00:25:17 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) 00:25:17 executing program 0: r0 = memfd_create(&(0x7f0000000080)="7d10", 0x0) fallocate(r0, 0x0, 0x0, 0x4d) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 00:25:17 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:17 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:17 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0)) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40001000000, 0x10, r4, 0x40000000000) r5 = gettid() perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfff, 0x20800, 0x2, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x9948, 0xffffffffffffff2d, 0x4, 0x0, 0x401, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000, 0x7fff, 0x0, 0x64, 0x6, 0x1, 0x3, 0xff, 0x7, 0x7, 0x9, 0x253, 0x6, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x10c8e, 0x100000001, 0x0, 0x7, 0x5, 0x7, 0x684e84f7}, r5, 0x10, 0xffffffffffffffff, 0x2) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x0) mmap(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0x40000000000008, 0x10, r3, 0xfffffffffffffffd) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:17 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) [ 1519.050317] pktgen: Cannot create thread for cpu 0 (-4) [ 1519.056316] pktgen: kernel_thread() failed for cpu 1 [ 1519.063125] pktgen: Cannot create thread for cpu 1 (-4) [ 1519.072395] pktgen: Initialization failed for all threads 00:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)="7d10", 0x0) fallocate(r0, 0x0, 0x0, 0x4d) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 00:25:18 executing program 4: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000000, 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00') 00:25:18 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)="7d10", 0x0) fallocate(r0, 0x0, 0x0, 0x4d) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 00:25:18 executing program 4: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000000, 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00') 00:25:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)="7d10", 0x0) fallocate(r0, 0x0, 0x0, 0x4d) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 00:25:18 executing program 4: fanotify_mark(0xffffffffffffffff, 0x80, 0x40000000, 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00') 00:25:18 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) 00:25:18 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000001ffb)) 00:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/182, 0x64) 00:25:18 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') setns(r0, 0x0) 00:25:18 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1fffffd, 0x8011, r1, 0x0) setrlimit(0x0, &(0x7f0000becff0)) 00:25:18 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) read$FUSE(r1, &(0x7f00000030c0), 0x12d3) read$FUSE(r1, &(0x7f00000020c0), 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) 00:25:19 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x80100, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'erspan0\x00', @ifru_hwaddr=@remote}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000280)=""/208, 0x50}], 0x1, 0x0) pread64(r1, &(0x7f0000000a40)=""/156, 0x9c, 0x41) 00:25:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 00:25:19 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) 00:25:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0xb) fcntl$setlease(r1, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:25:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) read$FUSE(r1, &(0x7f00000030c0), 0x12d3) read$FUSE(r1, &(0x7f00000020c0), 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) 00:25:19 executing program 1: mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000000)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}]}) 00:25:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) read$FUSE(r1, &(0x7f00000030c0), 0x12d3) read$FUSE(r1, &(0x7f00000020c0), 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) 00:25:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) fsync(r0) 00:25:19 executing program 0: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020400) 00:25:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 00:25:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 00:25:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/58, 0x3a) read$FUSE(r1, &(0x7f00000030c0), 0x12d3) read$FUSE(r1, &(0x7f00000020c0), 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) 00:25:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 00:25:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 00:25:19 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) 00:25:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}) close(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 00:25:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}) close(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 00:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0xb) fcntl$setlease(r1, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:25:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 00:25:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 00:25:20 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) 00:25:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}) close(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 00:25:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:20 executing program 0: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020400) 00:25:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 00:25:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 00:25:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000000)=0x4) ioctl$sock_inet_SIOCGARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}) close(r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") dup3(r0, r1, 0x0) 00:25:20 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10) 00:25:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 00:25:20 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 00:25:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:20 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysinfo(&(0x7f0000000000)=""/35) 00:25:20 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 00:25:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0xb) fcntl$setlease(r1, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:25:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 00:25:21 executing program 4: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)="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", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000001c0)=0x400084b) 00:25:21 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysinfo(&(0x7f0000000000)=""/35) 00:25:21 executing program 0: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020400) 00:25:21 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 00:25:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00'}) 00:25:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 00:25:21 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysinfo(&(0x7f0000000000)=""/35) 00:25:21 executing program 4: unshare(0x4040000) unshare(0x24020400) 00:25:21 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysinfo(&(0x7f0000000000)=""/35) 00:25:21 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:21 executing program 4: unshare(0x4040000) unshare(0x24020400) 00:25:21 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) 00:25:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 00:25:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) [ 1522.566418] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 00:25:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 00:25:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 00:25:22 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 00:25:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0xdf, 0x0, 0x6}}, 0x14) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x40) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x4}, 0x14) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001800)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x140, 0x258, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0xffffff00, @mac=@broadcast, {[0xff, 0x766d84e1da6c8e6c, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0xb223, 0xffffffff, 0x7, 0x2, 0x2, 0x0, 'vlan0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @remote, @dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0xffffffff}}}, {{@uncond, 0x23c, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2c2d, 0x8, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a2) 00:25:22 executing program 0: unshare(0x20000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020400) 00:25:22 executing program 4: unshare(0x4040000) unshare(0x24020400) 00:25:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r1, 0xa, 0xb) fcntl$setlease(r1, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:25:22 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4}) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) [ 1523.284688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 1523.296077] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:22 executing program 4: unshare(0x4040000) unshare(0x24020400) 00:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4}) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) 00:25:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) [ 1523.374309] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1523.402345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 00:25:22 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070107031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) tee(r1, r0, 0xb14, 0x0) 00:25:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 00:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4}) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) [ 1523.446154] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1523.478203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 00:25:22 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000400)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb25", 0x59, 0x9000}], 0x0, &(0x7f0000000240)=ANY=[]) 00:25:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0xdf, 0x0, 0x6}}, 0x14) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x40) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x4}, 0x14) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001800)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x140, 0x258, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0xffffff00, @mac=@broadcast, {[0xff, 0x766d84e1da6c8e6c, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0xb223, 0xffffffff, 0x7, 0x2, 0x2, 0x0, 'vlan0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @remote, @dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0xffffffff}}}, {{@uncond, 0x23c, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2c2d, 0x8, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a2) 00:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x4}) r2 = inotify_init1(0x0) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) 00:25:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) 00:25:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 00:25:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) tee(r1, r0, 0xb14, 0x0) [ 1524.125521] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 [ 1524.153766] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 00:25:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) tee(r1, r0, 0xb14, 0x0) 00:25:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) [ 1524.185012] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 00:25:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 00:25:23 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) tee(r1, r0, 0xb14, 0x0) 00:25:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000400)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb25", 0x59, 0x9000}], 0x0, &(0x7f0000000240)=ANY=[]) [ 1524.225845] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000400)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb25", 0x59, 0x9000}], 0x0, &(0x7f0000000240)=ANY=[]) [ 1524.312991] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 00:25:23 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000400)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb25", 0x59, 0x9000}], 0x0, &(0x7f0000000240)=ANY=[]) [ 1524.392697] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 [ 1524.454803] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 00:25:23 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0xdf, 0x0, 0x6}}, 0x14) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x40) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x4}, 0x14) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001800)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x140, 0x258, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0xffffff00, @mac=@broadcast, {[0xff, 0x766d84e1da6c8e6c, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0xb223, 0xffffffff, 0x7, 0x2, 0x2, 0x0, 'vlan0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @remote, @dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0xffffffff}}}, {{@uncond, 0x23c, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2c2d, 0x8, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a2) 00:25:24 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0xdf, 0x0, 0x6}}, 0x14) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x40) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d656"], 0x2f) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x6, 0x4}, 0x14) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001800)={'filter\x00', 0x7, 0x4, 0x458, 0x258, 0x140, 0x258, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000280), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0xffffff00, @mac=@broadcast, {[0xff, 0x766d84e1da6c8e6c, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0xb223, 0xffffffff, 0x7, 0x2, 0x2, 0x0, 'vlan0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @remote, @dev={0xac, 0x14, 0x14, 0x16}, 0x4, 0xffffffff}}}, {{@uncond, 0x23c, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2c2d, 0x8, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a2) 00:25:25 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:25 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) write$FUSE_POLL(r0, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x8001}}, 0x18) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="2f0000000400000000000000000000000000000000000000030000000000000007000000000000000000000000000080b5ac308fa49d2b5dd0039483e804aefc8e73756d932afd6532ba5b6a095c22b97cdedf1c5f9d7311a29b87f7f0391dbfb28c8206604d9a1044bac64a7e8e96891f51e844312fd3c276632f09083eb43a8f5859fe2205276d9dd3640356ce54d9a3940420c479da0d1e36ddc8c5b704af897e6c6dfd2df5ea2d773e33728d54c48e4e14bfd2192fd9bc76ba94e80b188b63ef58f0038d6b0e0305f9e373d76adde36bbe2d2ee7b3fe663e98"], 0xdb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r6, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r7, r0, &(0x7f00000000c0), 0x1) 00:25:25 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x3) 00:25:25 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) 00:25:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) [ 1526.617710] IPVS: Creating netns size=2536 id=231 00:25:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) 00:25:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) 00:25:25 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40800, &(0x7f0000000000), 0x10) 00:25:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r0, &(0x7f0000000040)=""/205, 0xcd) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x0, 0x401}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 00:25:26 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:26 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40800, &(0x7f0000000000), 0x10) 00:25:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) 00:25:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r0, &(0x7f0000000040)=""/205, 0xcd) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x0, 0x401}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 00:25:26 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) write$FUSE_POLL(r0, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x8001}}, 0x18) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="2f0000000400000000000000000000000000000000000000030000000000000007000000000000000000000000000080b5ac308fa49d2b5dd0039483e804aefc8e73756d932afd6532ba5b6a095c22b97cdedf1c5f9d7311a29b87f7f0391dbfb28c8206604d9a1044bac64a7e8e96891f51e844312fd3c276632f09083eb43a8f5859fe2205276d9dd3640356ce54d9a3940420c479da0d1e36ddc8c5b704af897e6c6dfd2df5ea2d773e33728d54c48e4e14bfd2192fd9bc76ba94e80b188b63ef58f0038d6b0e0305f9e373d76adde36bbe2d2ee7b3fe663e98"], 0xdb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r6, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r7, r0, &(0x7f00000000c0), 0x1) 00:25:26 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) 00:25:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:26 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40800, &(0x7f0000000000), 0x10) 00:25:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r0, &(0x7f0000000040)=""/205, 0xcd) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x0, 0x401}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 00:25:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) 00:25:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x6) getdents(r0, &(0x7f0000000040)=""/205, 0xcd) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno\x00', 0xb) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000480)={0xc9b0, 0x0, 0x4, 0x0, 0x401}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e23, @loopback}, 'erspan0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r1, 0x8, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/216, 0xd8, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000003800700000000000000000001"]) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 00:25:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) 00:25:26 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2000000088) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40800, &(0x7f0000000000), 0x10) 00:25:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:26 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1527.976071] IPVS: Creating netns size=2536 id=232 00:25:26 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) memfd_create(&(0x7f0000000740)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2c3bcce7be01a332229cd12dcea440d899c22cba00000000000000f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c340800", 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002cc, 0x0, 0x0) 00:25:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) write$FUSE_POLL(r0, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x8001}}, 0x18) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="2f0000000400000000000000000000000000000000000000030000000000000007000000000000000000000000000080b5ac308fa49d2b5dd0039483e804aefc8e73756d932afd6532ba5b6a095c22b97cdedf1c5f9d7311a29b87f7f0391dbfb28c8206604d9a1044bac64a7e8e96891f51e844312fd3c276632f09083eb43a8f5859fe2205276d9dd3640356ce54d9a3940420c479da0d1e36ddc8c5b704af897e6c6dfd2df5ea2d773e33728d54c48e4e14bfd2192fd9bc76ba94e80b188b63ef58f0038d6b0e0305f9e373d76adde36bbe2d2ee7b3fe663e98"], 0xdb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r6, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r7, r0, &(0x7f00000000c0), 0x1) 00:25:27 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) 00:25:27 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:27 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:27 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) 00:25:28 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047437, &(0x7f0000000180)) 00:25:28 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047437, &(0x7f0000000180)) 00:25:28 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000280)=0x38, 0x2000000000000001) 00:25:28 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000280)=0x38, 0x2000000000000001) 00:25:28 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047437, &(0x7f0000000180)) [ 1529.433937] pktgen: kernel_thread() failed for cpu 0 [ 1529.445831] pktgen: Cannot create thread for cpu 0 (-4) [ 1529.466640] pktgen: kernel_thread() failed for cpu 1 [ 1529.495297] pktgen: Cannot create thread for cpu 1 (-4) [ 1529.514846] pktgen: Initialization failed for all threads 00:25:28 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x41}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) write$FUSE_POLL(r0, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x8001}}, 0x18) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="2f0000000400000000000000000000000000000000000000030000000000000007000000000000000000000000000080b5ac308fa49d2b5dd0039483e804aefc8e73756d932afd6532ba5b6a095c22b97cdedf1c5f9d7311a29b87f7f0391dbfb28c8206604d9a1044bac64a7e8e96891f51e844312fd3c276632f09083eb43a8f5859fe2205276d9dd3640356ce54d9a3940420c479da0d1e36ddc8c5b704af897e6c6dfd2df5ea2d773e33728d54c48e4e14bfd2192fd9bc76ba94e80b188b63ef58f0038d6b0e0305f9e373d76adde36bbe2d2ee7b3fe663e98"], 0xdb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r6, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r7, r0, &(0x7f00000000c0), 0x1) 00:25:28 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000280)=0x38, 0x2000000000000001) 00:25:28 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047437, &(0x7f0000000180)) 00:25:28 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:28 executing program 2: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:28 executing program 1: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:28 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)="617474722f63757272656e740099871411d7432e4cd1d0c3679f15b8cb27b7fcfedaffdfb67899fd7611a29de5a2a9897cbc43db1add207e2395f8e43a285a5487f4d39a3f4160448ebe8e43b67448ec2d6ebc0522cdcfc53ec697") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000280)=0x38, 0x2000000000000001) 00:25:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:28 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:28 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000300)={0x0, 0x4, 0xffff}) perf_event_open(&(0x7f0000001d40)={0x0, 0x70, 0x3, 0x0, 0x7fffffff, 0x400, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4, 0xde, 0x0, 0x2, 0x3ff, 0x7742, 0x0, 0x6, 0x2, 0x0, 0x0, 0x101, 0x8001, 0x81, 0x0, 0x0, 0x0, 0xb8, 0xfff, 0x6, 0x962b, 0x0, 0x53d9, 0x0, 0x400, 0x0, @perf_config_ext, 0x1000, 0x7, 0x10001, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x4, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000001cc0)='fdinfo\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1529.898131] IPVS: Creating netns size=2536 id=233 00:25:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:28 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') [ 1530.069013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13873 sclass=netlink_route_socket pig=31215 comm=syz-executor6 00:25:28 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:28 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:28 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:29 executing program 2: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1530.241436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13366 sclass=netlink_route_socket pig=31232 comm=syz-executor6 00:25:29 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:29 executing program 1: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:29 executing program 0: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:29 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 2: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 7: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1530.885673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8244 sclass=netlink_route_socket pig=31253 comm=syz-executor0 00:25:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) [ 1530.908630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14649 sclass=netlink_route_socket pig=31259 comm=syz-executor5 00:25:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:29 executing program 1: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000500)={0x14, 0x69, 0x1, {0x1}}, 0x14) arch_prctl(0x1004, &(0x7f0000000600)="d538da96aba9cbfe6a7694707734a1f44ca2fbaaabe0eaa89b0de6e6b5f13c991ceb6d9db3497f05bfe49b2e265f6ed8d8ee4f4e3d24f5d401bacafa33378f6ba48a70ce29ad6aef4dd90275c1fd8f77b749fb70f974bd0c544d2dac18005e07ac1034bed55a81400ed1b16b3dd3ce1d3cec503a29628eae41") r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000280)) r3 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r3, &(0x7f0000000680)=""/57, 0x39) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x109040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x40000000}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="f6110892f57227e4f3246e09436754dfcdfc59f4af88e13a614e4aea845a3f1d06c2cf1141e5bfa6fa07a5bc1d47ea712bcd4b6ebc92ef0295586c8ae71cb96da96474613fada784e297725e751bbc9cd26ddfadf9feb49e5ea2173732ec541ff4e4", 0x62) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ptrace(0x4219, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000380)=0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/access\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="300000002000010400000021000000000200000000000008000b000000000008000f0000000000180000000000000000165ea11319a05b6a47fe38a4b8be8751255f776ba6e6126df28f6abe41c4e18d41ea1c2dbbab55d94fa58b2a708ef2e7510ca763992a1c20f78131570f025333300da2ce1828e0c8999195fe3535e00139209dcad484552688016c8043b0792adf56ee008768e2bee123f9d6973c53b59848e4583d66ade0cf2e819fd5e7d8c6c26d74b2431c976d5210d6806ab42ca82884d01a0b9a42b9ad9a71a9db1d333770d2a1b214f7ffff49955388c641d9f3a8fb3cffffffff13734ad9985ecc34ae40324a909cb2cf371d8726df1742318db038592449adadf22f19d341409bd3f732b4fcb869ade9b7d13a48ca0a81be2171f7229d898ba524af44bfced51b464c275e28930198e3a3d176e83cdec18bb5f74059f3a3d995c9"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 1: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 00:25:30 executing program 1: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 00:25:30 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:30 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') [ 1531.732356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14649 sclass=netlink_route_socket pig=31318 comm=syz-executor5 00:25:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:30 executing program 1: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 1531.799927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12593 sclass=netlink_route_socket pig=31327 comm=syz-executor2 00:25:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 00:25:30 executing program 1: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 1531.842888] IPVS: Creating netns size=2536 id=234 00:25:30 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) [ 1532.157103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1532.171073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1532.228623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1532.243129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1532.300181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1532.314499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1532.328567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1532.343892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1532.994934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1533.028897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1533.035248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1533.042827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1533.346686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8248 sclass=netlink_route_socket pig=31718 comm=syz-executor6 00:25:32 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:32 executing program 7: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:32 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0x1c, 0x19, 0x0, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev, 0x800}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') 00:25:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r2 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0xffffffff, 0x2, 0x1, 0x9501, 0x0, 0xffffffffffff4aa9, 0x20, 0x1, 0x100000000, 0x100000000, 0xfffffffffffff5ad, 0x8000, 0x8, 0x20, 0x7, 0x80000001, 0x13d, 0x7fff, 0x0, 0x7f, 0x3, 0x6, 0x6, 0x5, 0x6, 0x74, 0xb9a4, 0x0, 0x8000, 0x7fff, 0x40, 0x6188, 0x100000000, 0x2, 0x3, 0x6ec, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x240, 0x1, 0xfffffffffffffff8, 0x7, 0xea7, 0xffff, 0x7}, r3, 0x9, r0, 0x1) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='bfs\x00', 0x5010, &(0x7f0000000500)="8f2ef1dafa31894a239d26783696ef83b3393c672534b55914241ec4029c61cccabda854d9194aabc7b022ff0b7d2cbc2c7ffc0a2b9b21f89564ab98733952cbef47be3b59ff722795") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') clock_gettime(0x0, &(0x7f0000001900)={0x0, 0x0}) futimesat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f0000001940)={{0x0, 0x2710}, {r5, r6/1000+30000}}) sendfile(r2, r4, &(0x7f0000000000), 0x80000002) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = getegid() fchown(r7, 0x0, r8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/netstat\x00') ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) 00:25:32 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="fd4d9b6fa325fe0f9c34c09570b969ddea3fe28afe87258116c58b02d217d6955090ca0b192512de2e4f2e3465ec6aa16bdfd158afec41d87a89bcd440e396a03d253792db314e99dd320a5951802b05e6cf10779293e0e8bc91406994f75259deacff72341a698a2e09d6457feca571f3bd0b94994419c08538d06433336d31d1a47eb50ae1aee3bddb094033c0d4f67b864f07036ebfcce36035098ebd27afdf6fe4b0cf99e850f8c48d567b9a70f932c5f901474800f45fbec51befe57fdd7241441307393e8c32c10d6b60f1e7c2c96abec25ae5d8ea7c838263ed6865ad022f3c662091a23f8026513adb72ceef83f787d98285c0997192aefcf0758417c87402ee9297a35eb0eee8dd302fee6fa414d67c7e237f3a713c939e7b1040635e1be732773fe61997d8106baeabeca3dc4d2ac56ea6ed24b63b5c6e4def2c9811ce8ca3e873457c15784cc01cff187a73300ac61130ce7840a7704705b08c498328f50f51ad84a173edd8a4bbe730dc144048fbe9cd59eabc39ca78f54de1e04e9d728e6c21fccfafab8410cacdf97d61b24fbcf3a94f8cb6ee957df4ba72827b6f0150198b41d97e109ac2d67f5ad2417aa742bf651f211a38c06ae0f191297fe3cffafe0a3bc3c8059cba876827249ea8847499e25d267eb40c4788d9defee07bf57a74bc5d244202106ba6289dede4fcfd21ebfa35a87258b46d0847347089783a06a4c8defe70b49adfe55278ed5f78244e8abfe35e982801395dd0bc1332b6423c5f2108b7def1626e84f46065691ddddcae2b25aecc2959847d0d1c34f38c0fbb7317bc070e01f7102b2bb16875b032e30ceed5e9f2e2c9bf3f038815c70fa0adec0f406aad013de0016f8d778966b3f397772f9b66fef0aabc917d806dde4c6221fbac873aea6e2f6460ee4dc020f6227badfa77586b7fc5f4606d37a398452aed42432cbfc148e7fe20c059518be793e4f973fd6abe7a2fb928d8387e41ecdb5c29ef4d2bf17e3f56856385e78a78683f17cbc1fb986ad0eef499f9c81c5e8e5648c51a0287f53f085dcf59843082f8e933884184770b9f29ced77c5cc8accdbbd34a2d6d00af2f0778406636827a824ea4bd3dbc36d08ac56430eb2fa48b2b88c94b1620a693612b4492867df1799d22370b853a605450d6e9a16294a584fd6e516ba5d51d6435f74bfca02c7a65914034b12d9abcfee885af437add779ec47aaf4d85d8dabffaef2d722d299d8b1ed06c49b1a641a0b8f041d2eb9271982a337d90c673766a9f56a8355ace97a3ba090e2062c39759bb1e91f8001c4cc4df95c12a0ff0a52c9cc40cdae068ad5f565bbbbb83d32f084e978b694481479b3940689ae7eb43633517ea05ed79c63dd6a8b613ac87f569738d3866b2235a18e48a3ce67a6c80a9359de772faac17d95238a5d57c099805e9fa7adf4bc985809b842a0d06521f3ae11e83a119f7030b6b33daf564662d6a8f2199a2c04a057d788d8a67854359f057f2ec88ce93b318250ee5f0caca2ced1c3b09427201726bed597f5c4d874bccfb7874d7865f92c76ff7a3faddfd898b6c7d2cbc85196780095a1f3222e2349ce33bfe9da2f201c529845d0ee5add9141dcaab40a5e46cd9ea40d92327a309af24ad51a73b09704d4656582b5cefccfbe8ac73dc28e6dd5317d1c5162e64bba784e6cffa6db14e30d1cd6aaa1cf2b9656b9f4d22a1f0085a4b659b26688510100abd2402f2aa343a32b06f0301e6dbee1fc7946b72cbc5295ed1543e4e97f524cdd47b8626d2197c949284b33fe6eb459d950b1f1593f142c7957bd1943d527f0309bad331d7b0196494f72777c5cc4ff30af7bb1f5ae3df689523272055e46dc115841e894ac26ebc90584b631eae29df4c8ce651ebf2416f6dd300f252bf6cf5790b63c6a3836b5521e2c1e0c592eaf5ca4ff1334f0b5f824242d167ddadb993", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 00:25:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x28) 00:25:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x28) 00:25:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 00:25:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 7: r0 = socket(0x2000000011, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x81}) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x8100, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:32 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x28) [ 1533.526428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12593 sclass=netlink_route_socket pig=31728 comm=syz-executor2 00:25:32 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:32 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"6c6f000000000000000000000000ed1f", 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@local, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 00:25:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000040)=0x28) 00:25:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 00:25:32 executing program 2: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020004000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 00:25:32 executing program 7: r0 = socket(0x2000000011, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x81}) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x8100, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/54, 0x10000008d}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 00:25:32 executing program 4: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 00:25:32 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x3) unshare(0x60000000) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8edbf1978d", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r6 = mq_open(&(0x7f00000003c0)='/dev/fuse\x00', 0x800, 0x2, &(0x7f0000000400)={0xa0, 0x5, 0x9, 0x54c, 0x42, 0x5, 0x0, 0x3f}) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20030, r0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000180)="986c038e24cc378daa1627434ca47369", 0x10) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/71, 0x47) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000040)=0x80000001) setfsuid(r2) fchown(r1, r2, r3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000280)=0x7) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000440)=0x4) dup3(0xffffffffffffffff, r5, 0x80000) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0x798, 0x80, 0x7f, 0x100, 0x7, 0x2, 0x4, 0x100000001, 0x4, 0x8}) 00:25:32 executing program 7: r0 = socket(0x2000000011, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x81}) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x8100, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') close(r0) 00:25:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) lseek(r3, 0x0, 0x4) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 00:25:32 executing program 7: r0 = socket(0x2000000011, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x81}) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x8100, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) 00:25:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000003680)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000001000)=[@cred={0x20}, @cred={0x20}], 0x40}], 0x1, 0x0) 00:25:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "bfcbe22b5c83840bce263c4b3234a3ef4b0858bc98755c037af1306e31c46bfade6b595368166de273f0cce627aa2cb7bd97790a7e15bf5093840d6c4eea3e381b9bfb110ef813a0edc8a0003f3291a514cc46caddecebbc5f597aeac08e4f73a886ebe886adb5110bad2ebd810974a7065ef188f4d80054088e6694adddea3e4d8fc8aeac6a286940ed90"}, 0xa4) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) [ 1533.884691] IPVS: Creating netns size=2536 id=235 [ 1533.911437] pktgen: kernel_thread() failed for cpu 0 [ 1533.916585] pktgen: Cannot create thread for cpu 0 (-4) [ 1533.922439] pktgen: kernel_thread() failed for cpu 1 [ 1533.927770] pktgen: Cannot create thread for cpu 1 (-4) [ 1533.933319] pktgen: Initialization failed for all threads 00:25:33 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:33 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) r0 = getpid() r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x2, 0x0) 00:25:33 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000003680)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000001000)=[@cred={0x20}, @cred={0x20}], 0x40}], 0x1, 0x0) 00:25:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "bfcbe22b5c83840bce263c4b3234a3ef4b0858bc98755c037af1306e31c46bfade6b595368166de273f0cce627aa2cb7bd97790a7e15bf5093840d6c4eea3e381b9bfb110ef813a0edc8a0003f3291a514cc46caddecebbc5f597aeac08e4f73a886ebe886adb5110bad2ebd810974a7065ef188f4d80054088e6694adddea3e4d8fc8aeac6a286940ed90"}, 0xa4) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) 00:25:33 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) lseek(r3, 0x0, 0x4) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 00:25:33 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x3) unshare(0x60000000) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8edbf1978d", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r6 = mq_open(&(0x7f00000003c0)='/dev/fuse\x00', 0x800, 0x2, &(0x7f0000000400)={0xa0, 0x5, 0x9, 0x54c, 0x42, 0x5, 0x0, 0x3f}) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20030, r0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000180)="986c038e24cc378daa1627434ca47369", 0x10) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/71, 0x47) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000040)=0x80000001) setfsuid(r2) fchown(r1, r2, r3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000280)=0x7) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000440)=0x4) dup3(0xffffffffffffffff, r5, 0x80000) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0x798, 0x80, 0x7f, 0x100, 0x7, 0x2, 0x4, 0x100000001, 0x4, 0x8}) 00:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000003680)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000001000)=[@cred={0x20}, @cred={0x20}], 0x40}], 0x1, 0x0) 00:25:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "bfcbe22b5c83840bce263c4b3234a3ef4b0858bc98755c037af1306e31c46bfade6b595368166de273f0cce627aa2cb7bd97790a7e15bf5093840d6c4eea3e381b9bfb110ef813a0edc8a0003f3291a514cc46caddecebbc5f597aeac08e4f73a886ebe886adb5110bad2ebd810974a7065ef188f4d80054088e6694adddea3e4d8fc8aeac6a286940ed90"}, 0xa4) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) 00:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000003680)=[{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000001000)=[@cred={0x20}, @cred={0x20}], 0x40}], 0x1, 0x0) 00:25:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}], 0xa, "bfcbe22b5c83840bce263c4b3234a3ef4b0858bc98755c037af1306e31c46bfade6b595368166de273f0cce627aa2cb7bd97790a7e15bf5093840d6c4eea3e381b9bfb110ef813a0edc8a0003f3291a514cc46caddecebbc5f597aeac08e4f73a886ebe886adb5110bad2ebd810974a7065ef188f4d80054088e6694adddea3e4d8fc8aeac6a286940ed90"}, 0xa4) socket$inet6(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000000)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) 00:25:33 executing program 2: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:33 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:33 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="fd4d9b6fa325fe0f9c34c09570b969ddea3fe28afe87258116c58b02d217d6955090ca0b192512de2e4f2e3465ec6aa16bdfd158afec41d87a89bcd440e396a03d253792db314e99dd320a5951802b05e6cf10779293e0e8bc91406994f75259deacff72341a698a2e09d6457feca571f3bd0b94994419c08538d06433336d31d1a47eb50ae1aee3bddb094033c0d4f67b864f07036ebfcce36035098ebd27afdf6fe4b0cf99e850f8c48d567b9a70f932c5f901474800f45fbec51befe57fdd7241441307393e8c32c10d6b60f1e7c2c96abec25ae5d8ea7c838263ed6865ad022f3c662091a23f8026513adb72ceef83f787d98285c0997192aefcf0758417c87402ee9297a35eb0eee8dd302fee6fa414d67c7e237f3a713c939e7b1040635e1be732773fe61997d8106baeabeca3dc4d2ac56ea6ed24b63b5c6e4def2c9811ce8ca3e873457c15784cc01cff187a73300ac61130ce7840a7704705b08c498328f50f51ad84a173edd8a4bbe730dc144048fbe9cd59eabc39ca78f54de1e04e9d728e6c21fccfafab8410cacdf97d61b24fbcf3a94f8cb6ee957df4ba72827b6f0150198b41d97e109ac2d67f5ad2417aa742bf651f211a38c06ae0f191297fe3cffafe0a3bc3c8059cba876827249ea8847499e25d267eb40c4788d9defee07bf57a74bc5d244202106ba6289dede4fcfd21ebfa35a87258b46d0847347089783a06a4c8defe70b49adfe55278ed5f78244e8abfe35e982801395dd0bc1332b6423c5f2108b7def1626e84f46065691ddddcae2b25aecc2959847d0d1c34f38c0fbb7317bc070e01f7102b2bb16875b032e30ceed5e9f2e2c9bf3f038815c70fa0adec0f406aad013de0016f8d778966b3f397772f9b66fef0aabc917d806dde4c6221fbac873aea6e2f6460ee4dc020f6227badfa77586b7fc5f4606d37a398452aed42432cbfc148e7fe20c059518be793e4f973fd6abe7a2fb928d8387e41ecdb5c29ef4d2bf17e3f56856385e78a78683f17cbc1fb986ad0eef499f9c81c5e8e5648c51a0287f53f085dcf59843082f8e933884184770b9f29ced77c5cc8accdbbd34a2d6d00af2f0778406636827a824ea4bd3dbc36d08ac56430eb2fa48b2b88c94b1620a693612b4492867df1799d22370b853a605450d6e9a16294a584fd6e516ba5d51d6435f74bfca02c7a65914034b12d9abcfee885af437add779ec47aaf4d85d8dabffaef2d722d299d8b1ed06c49b1a641a0b8f041d2eb9271982a337d90c673766a9f56a8355ace97a3ba090e2062c39759bb1e91f8001c4cc4df95c12a0ff0a52c9cc40cdae068ad5f565bbbbb83d32f084e978b694481479b3940689ae7eb43633517ea05ed79c63dd6a8b613ac87f569738d3866b2235a18e48a3ce67a6c80a9359de772faac17d95238a5d57c099805e9fa7adf4bc985809b842a0d06521f3ae11e83a119f7030b6b33daf564662d6a8f2199a2c04a057d788d8a67854359f057f2ec88ce93b318250ee5f0caca2ced1c3b09427201726bed597f5c4d874bccfb7874d7865f92c76ff7a3faddfd898b6c7d2cbc85196780095a1f3222e2349ce33bfe9da2f201c529845d0ee5add9141dcaab40a5e46cd9ea40d92327a309af24ad51a73b09704d4656582b5cefccfbe8ac73dc28e6dd5317d1c5162e64bba784e6cffa6db14e30d1cd6aaa1cf2b9656b9f4d22a1f0085a4b659b26688510100abd2402f2aa343a32b06f0301e6dbee1fc7946b72cbc5295ed1543e4e97f524cdd47b8626d2197c949284b33fe6eb459d950b1f1593f142c7957bd1943d527f0309bad331d7b0196494f72777c5cc4ff30af7bb1f5ae3df689523272055e46dc115841e894ac26ebc90584b631eae29df4c8ce651ebf2416f6dd300f252bf6cf5790b63c6a3836b5521e2c1e0c592eaf5ca4ff1334f0b5f824242d167ddadb993", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) [ 1534.928960] IPVS: Creating netns size=2536 id=236 00:25:33 executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) set_robust_list(&(0x7f00000016c0)={&(0x7f0000000180), 0x0, &(0x7f00000012c0)={&(0x7f0000001680)}}, 0x2af) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vga_arbiter\x00', 0x40, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB], &(0x7f00000015c0)='(+\\vmnet0GPL/,!-\x00', 0x11, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001400)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000b80)) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000002c0), &(0x7f0000000300)="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", 0x56c, 0xfffffffffffffffc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x1, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000a80)) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) mount$9p_unix(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='9p\x00', 0x0, &(0x7f00000009c0)={'trans=\x00'}) 00:25:34 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) r0 = getpid() r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x2, 0x0) 00:25:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) lseek(r3, 0x0, 0x4) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 00:25:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x3) unshare(0x60000000) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8edbf1978d", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r6 = mq_open(&(0x7f00000003c0)='/dev/fuse\x00', 0x800, 0x2, &(0x7f0000000400)={0xa0, 0x5, 0x9, 0x54c, 0x42, 0x5, 0x0, 0x3f}) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20030, r0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000180)="986c038e24cc378daa1627434ca47369", 0x10) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/71, 0x47) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000040)=0x80000001) setfsuid(r2) fchown(r1, r2, r3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000280)=0x7) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000440)=0x4) dup3(0xffffffffffffffff, r5, 0x80000) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0x798, 0x80, 0x7f, 0x100, 0x7, 0x2, 0x4, 0x100000001, 0x4, 0x8}) 00:25:34 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="759c013f74818eeb4c212eaea86a94fca23fc211edc82c649d34a42dae28c22e0e9894fb07b45611", 0x28}], 0x1) 00:25:34 executing program 2: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:34 executing program 6: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) lseek(r3, 0x0, 0x4) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 00:25:34 executing program 5: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:34 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:34 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1536.034134] IPVS: Creating netns size=2536 id=237 00:25:34 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) r0 = getpid() r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x2, 0x0) 00:25:34 executing program 0: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:34 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) epoll_wait(r0, &(0x7f0000000300)=[{}], 0x1, 0x3) unshare(0x60000000) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8edbf1978d", @ifru_map}) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/checkreqprot\x00', 0x40000, 0x0) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r6 = mq_open(&(0x7f00000003c0)='/dev/fuse\x00', 0x800, 0x2, &(0x7f0000000400)={0xa0, 0x5, 0x9, 0x54c, 0x42, 0x5, 0x0, 0x3f}) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20030, r0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000180)="986c038e24cc378daa1627434ca47369", 0x10) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/71, 0x47) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100)) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000040)=0x80000001) setfsuid(r2) fchown(r1, r2, r3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000280)=0x7) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000440)=0x4) dup3(0xffffffffffffffff, r5, 0x80000) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0x798, 0x80, 0x7f, 0x100, 0x7, 0x2, 0x4, 0x100000001, 0x4, 0x8}) 00:25:35 executing program 2: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:35 executing program 6: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:35 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:35 executing program 5: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @loopback}, 0x0, 0x2, 0x0, 0x7, 0x2, &(0x7f0000000680)='tunl0\x00', 0x401, 0xcf0, 0xa3}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:25:35 executing program 0: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:35 executing program 4: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 00:25:35 executing program 0: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 00:25:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 00:25:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 00:25:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000009600)=[{{0x0, 0x49, &(0x7f0000006300)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f00000095c0), 0xd6}}], 0x2, 0x2000, &(0x7f00000097c0)={0x0, 0x1c9c380}) 00:25:35 executing program 7: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000000080), &(0x7f0000553000)) r0 = getpid() r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioprio_set$pid(0x1, r0, 0x7fff) ioprio_get$uid(0x2, 0x0) 00:25:35 executing program 0: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) [ 1537.067432] pktgen: kernel_thread() failed for cpu 0 [ 1537.072770] pktgen: Cannot create thread for cpu 0 (-4) [ 1537.078450] pktgen: kernel_thread() failed for cpu 1 [ 1537.084024] pktgen: Cannot create thread for cpu 1 (-4) [ 1537.089464] pktgen: Initialization failed for all threads 00:25:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @broadcast}}) 00:25:36 executing program 4: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000009600)=[{{0x0, 0x49, &(0x7f0000006300)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f00000095c0), 0xd6}}], 0x2, 0x2000, &(0x7f00000097c0)={0x0, 0x1c9c380}) 00:25:36 executing program 6: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:36 executing program 2: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:36 executing program 5: socket(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) open(&(0x7f0000000200)='./file0\x00', 0x10040, 0x40) fcntl$setlease(r0, 0x400, 0x1) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f00000003c0), &(0x7f0000000400)={0x77359400}, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) 00:25:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @broadcast}}) 00:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @broadcast}}) 00:25:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000009600)=[{{0x0, 0x49, &(0x7f0000006300)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f00000095c0), 0xd6}}], 0x2, 0x2000, &(0x7f00000097c0)={0x0, 0x1c9c380}) 00:25:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={'tunl0\x00', {0x2, 0x0, @broadcast}}) 00:25:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) recvmmsg(r0, &(0x7f0000009600)=[{{0x0, 0x49, &(0x7f0000006300)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f00000095c0), 0xd6}}], 0x2, 0x2000, &(0x7f00000097c0)={0x0, 0x1c9c380}) 00:25:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x154, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 00:25:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x154, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 00:25:36 executing program 4: r0 = dup(0xffffffffffffffff) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001600)=""/4096) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast2}, 0x8) 00:25:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:36 executing program 7: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x154, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) [ 1537.908701] sd 0:0:1:0: [sg0] tag#23 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1537.917898] sd 0:0:1:0: [sg0] tag#23 CDB: opcode=0xda (vendor) [ 1537.924678] sd 0:0:1:0: [sg0] tag#23 CDB[00]: da 84 5a ca 5d c2 5c cf b9 89 85 d8 5f d5 54 5a [ 1537.933467] sd 0:0:1:0: [sg0] tag#23 CDB[10]: bd 01 3c 3b 82 b5 c3 e6 fe e1 e1 af 2b 9a 06 93 [ 1537.942271] sd 0:0:1:0: [sg0] tag#23 CDB[20]: a7 af 3a a9 db 9a 00 06 58 4e 6f c2 58 d2 d3 d3 [ 1537.951108] sd 0:0:1:0: [sg0] tag#23 CDB[30]: a6 26 ff fa a0 bc f6 34 25 94 ea 8e 48 71 09 20 [ 1537.959876] sd 0:0:1:0: [sg0] tag#23 CDB[40]: 2b 9d 53 5a 90 76 53 c8 65 9d 3e a8 ab a8 de 60 [ 1537.968757] sd 0:0:1:0: [sg0] tag#23 CDB[50]: 71 7c 31 40 d2 1d b2 d8 c1 a7 ec 67 ca bf 17 b1 [ 1537.977486] sd 0:0:1:0: [sg0] tag#23 CDB[60]: 12 40 f0 b5 d2 ef d3 44 f2 ac fb 1d f7 29 21 5d [ 1537.986428] sd 0:0:1:0: [sg0] tag#23 CDB[70]: 05 94 92 6b 14 d1 2c 08 53 0c 38 da 1a b7 b2 49 [ 1537.995215] sd 0:0:1:0: [sg0] tag#23 CDB[80]: 68 d1 1a b3 10 ab 7e b2 91 09 02 05 06 86 60 a4 [ 1538.004003] sd 0:0:1:0: [sg0] tag#23 CDB[90]: 83 1c b4 97 9b 6e d1 d3 f8 a4 53 7e 3c a9 70 00:25:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 00:25:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0x154, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@dev}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 00:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:36 executing program 5: prctl$intptr(0x1c, 0x64) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 00:25:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:36 executing program 7: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 00:25:36 executing program 5: prctl$intptr(0x1c, 0x64) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 00:25:36 executing program 1: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 00:25:37 executing program 5: prctl$intptr(0x1c, 0x64) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 00:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 00:25:37 executing program 5: prctl$intptr(0x1c, 0x64) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 00:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:37 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) [ 1538.415652] sd 0:0:1:0: [sg0] tag#23 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1538.426012] sd 0:0:1:0: [sg0] tag#23 CDB: opcode=0xda (vendor) [ 1538.432148] sd 0:0:1:0: [sg0] tag#23 CDB[00]: da 84 5a ca 5d c2 5c cf b9 89 85 d8 5f d5 54 5a [ 1538.440940] sd 0:0:1:0: [sg0] tag#23 CDB[10]: bd 01 3c 3b 82 b5 c3 e6 fe e1 e1 af 2b 9a 06 93 [ 1538.449692] sd 0:0:1:0: [sg0] tag#23 CDB[20]: a7 af 3a a9 db 9a 00 06 58 4e 6f c2 58 d2 d3 d3 [ 1538.458499] sd 0:0:1:0: [sg0] tag#23 CDB[30]: a6 26 ff fa a0 bc f6 34 25 94 ea 8e 48 71 09 20 [ 1538.467347] sd 0:0:1:0: [sg0] tag#23 CDB[40]: 2b 9d 53 5a 90 76 53 c8 65 9d 3e a8 ab a8 de 60 [ 1538.476139] sd 0:0:1:0: [sg0] tag#23 CDB[50]: 71 7c 31 40 d2 1d b2 d8 c1 a7 ec 67 ca bf 17 b1 [ 1538.484910] sd 0:0:1:0: [sg0] tag#23 CDB[60]: 12 40 f0 b5 d2 ef d3 44 f2 ac fb 1d f7 29 21 5d [ 1538.493687] sd 0:0:1:0: [sg0] tag#23 CDB[70]: 05 94 92 6b 14 d1 2c 08 53 0c 38 da 1a b7 b2 49 [ 1538.502440] sd 0:0:1:0: [sg0] tag#23 CDB[80]: 68 d1 1a b3 10 ab 7e b2 91 09 02 05 06 86 60 a4 [ 1538.511280] sd 0:0:1:0: [sg0] tag#23 CDB[90]: 83 1c b4 97 9b 6e d1 d3 f8 a4 53 7e 3c a9 70 00:25:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:37 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)="6f6f6d5f61646a0450078ce6f4c4961e45f0b263edd91c00b4a63c26d184e059b72ee31c41bfe22ea0d9de0d5f0c2d90bb3c099eba5f3b752d8837241712445bda036546b41368e0204eb18fbe13e2a4a7c13fb7343853ea18c60ac5e71dd0c885b118cd4ca7f46dc4b94e668ee5985374014ab1fd6c088d5efe63d4abec80dc4649bbacab97fc0af8147e4e03c487700012fb7bb921b4ea05637befa22d67b6a4c735e64043c3f8205f29c0f235961841c952fb90fdfae10f5ae265a32853efba3810d21f73b736b49653050fa88feb8ceb30d967a551a7f103c5a648fc1fa7") rt_sigaction(0xc, &(0x7f0000000100)={0xff, {0x50}, 0x40000000, 0xfffffffffffffe00}, &(0x7f0000000140), 0x8, &(0x7f0000000180)) 00:25:37 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:37 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 00:25:37 executing program 7: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x1, 0x8, 0x7ff0000000000000, 0x6, 0x0, 0x100, 0x80004, 0x1, 0x4, 0x100000001, 0x2, 0x1, 0x100, 0x5, 0x0, 0x9, 0xfffffffffffff3a9, 0x800, 0x0, 0x200, 0x7fff, 0x1, 0xee44, 0x4, 0x1ff, 0x3, 0x1, 0xffffffff, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x5, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0xf6, 0x0, 0x40, 0x91b9}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) unshare(0x8000200) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)="19480400000bd7ad767c22d77033aea000ad0e3b6e5b1198334ddb04619dba19ea69a4968b7da49fb5203088f31273dff714d4d71e749b6b3123ba52fed35b5b7883e9a52f6a5086ddc23663c6d2089ca492f6d2de41a32d16b91bc98568fbe532d8451d500ec4680146725361a2a62a669b39b5992c6135c8f3d1b1d1e72a38749eb02668d3cf812bbcb9eeca51ece9fab5547d95797f") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r2, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x6}, 0x30, {0x2, 0x4e24, @broadcast}, 'irlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000680)={0x400, 0x0, 0x0, 0x8, 0x800, 0x3}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x1, 0x9, 0x9d, 0x100}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x6, 0x7, 0x0, 0x6, 0x0, 0x838c, 0xc4, 0xe, 0xc5, 0xb6c, 0x3, 0xff800, 0x4, 0x0, 0x80000000, 0xfff8000000000000, 0x9, 0x9, 0x2000000000000, 0x80, 0xd9, 0x3, 0x9, 0x8, 0x9, 0x0, 0x0, 0x7, 0x3626dc1e, 0x0, 0x3, 0x28, 0x6, 0x7fffffff, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x24, 0x0, 0x6, 0x7}, r7, 0x0, r1, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x9f, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67cabf17b11240f0b5d2efd344f2acfb1df729215d0594926b14d12c08530c38da1ab7b24968d11ab310ab7eb291090205068660a4831cb4979b6ed1d3f8a4537e3ca970", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:37 executing program 1: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000001c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) 00:25:37 executing program 2: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 00:25:38 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)="6f6f6d5f61646a0450078ce6f4c4961e45f0b263edd91c00b4a63c26d184e059b72ee31c41bfe22ea0d9de0d5f0c2d90bb3c099eba5f3b752d8837241712445bda036546b41368e0204eb18fbe13e2a4a7c13fb7343853ea18c60ac5e71dd0c885b118cd4ca7f46dc4b94e668ee5985374014ab1fd6c088d5efe63d4abec80dc4649bbacab97fc0af8147e4e03c487700012fb7bb921b4ea05637befa22d67b6a4c735e64043c3f8205f29c0f235961841c952fb90fdfae10f5ae265a32853efba3810d21f73b736b49653050fa88feb8ceb30d967a551a7f103c5a648fc1fa7") rt_sigaction(0xc, &(0x7f0000000100)={0xff, {0x50}, 0x40000000, 0xfffffffffffffe00}, &(0x7f0000000140), 0x8, &(0x7f0000000180)) 00:25:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) [ 1539.332862] sd 0:0:1:0: [sg0] tag#23 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1539.343773] sd 0:0:1:0: [sg0] tag#23 CDB: opcode=0xda (vendor) [ 1539.350104] sd 0:0:1:0: [sg0] tag#23 CDB[00]: da 84 5a ca 5d c2 5c cf b9 89 85 d8 5f d5 54 5a [ 1539.359035] sd 0:0:1:0: [sg0] tag#23 CDB[10]: bd 01 3c 3b 82 b5 c3 e6 fe e1 e1 af 2b 9a 06 93 [ 1539.369366] sd 0:0:1:0: [sg0] tag#23 CDB[20]: a7 af 3a a9 db 9a 00 06 58 4e 6f c2 58 d2 d3 d3 [ 1539.378234] sd 0:0:1:0: [sg0] tag#23 CDB[30]: a6 26 ff fa a0 bc f6 34 25 94 ea 8e 48 71 09 20 [ 1539.387911] sd 0:0:1:0: [sg0] tag#23 CDB[40]: 2b 9d 53 5a 90 76 53 c8 65 9d 3e a8 ab a8 de 60 [ 1539.397105] sd 0:0:1:0: [sg0] tag#23 CDB[50]: 71 7c 31 40 d2 1d b2 d8 c1 a7 ec 67 ca bf 17 b1 [ 1539.406502] sd 0:0:1:0: [sg0] tag#23 CDB[60]: 12 40 f0 b5 d2 ef d3 44 f2 ac fb 1d f7 29 21 5d [ 1539.415441] sd 0:0:1:0: [sg0] tag#23 CDB[70]: 05 94 92 6b 14 d1 2c 08 53 0c 38 da 1a b7 b2 49 [ 1539.424312] sd 0:0:1:0: [sg0] tag#23 CDB[80]: 68 d1 1a b3 10 ab 7e b2 91 09 02 05 06 86 60 a4 00:25:38 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)="6f6f6d5f61646a0450078ce6f4c4961e45f0b263edd91c00b4a63c26d184e059b72ee31c41bfe22ea0d9de0d5f0c2d90bb3c099eba5f3b752d8837241712445bda036546b41368e0204eb18fbe13e2a4a7c13fb7343853ea18c60ac5e71dd0c885b118cd4ca7f46dc4b94e668ee5985374014ab1fd6c088d5efe63d4abec80dc4649bbacab97fc0af8147e4e03c487700012fb7bb921b4ea05637befa22d67b6a4c735e64043c3f8205f29c0f235961841c952fb90fdfae10f5ae265a32853efba3810d21f73b736b49653050fa88feb8ceb30d967a551a7f103c5a648fc1fa7") rt_sigaction(0xc, &(0x7f0000000100)={0xff, {0x50}, 0x40000000, 0xfffffffffffffe00}, &(0x7f0000000140), 0x8, &(0x7f0000000180)) [ 1539.433095] sd 0:0:1:0: [sg0] tag#23 CDB[90]: 83 1c b4 97 9b 6e d1 d3 f8 a4 53 7e 3c a9 70 00:25:38 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40040b, {0xffffffbfffbff270}}, &(0x7f0000000080), 0x8, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x800000000044031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)="6f6f6d5f61646a0450078ce6f4c4961e45f0b263edd91c00b4a63c26d184e059b72ee31c41bfe22ea0d9de0d5f0c2d90bb3c099eba5f3b752d8837241712445bda036546b41368e0204eb18fbe13e2a4a7c13fb7343853ea18c60ac5e71dd0c885b118cd4ca7f46dc4b94e668ee5985374014ab1fd6c088d5efe63d4abec80dc4649bbacab97fc0af8147e4e03c487700012fb7bb921b4ea05637befa22d67b6a4c735e64043c3f8205f29c0f235961841c952fb90fdfae10f5ae265a32853efba3810d21f73b736b49653050fa88feb8ceb30d967a551a7f103c5a648fc1fa7") rt_sigaction(0xc, &(0x7f0000000100)={0xff, {0x50}, 0x40000000, 0xfffffffffffffe00}, &(0x7f0000000140), 0x8, &(0x7f0000000180)) 00:25:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 00:25:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000180)=""/11, 0x3a2) r1 = epoll_create1(0x0) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000280)={0x6000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x18, 0x0, 0x1) connect(r3, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000f4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=@req={0x6b32, 0x0, 0x9, 0x7}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) syz_open_pts(r0, 0x0) 00:25:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 00:25:38 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:38 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:38 executing program 1: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:38 executing program 2: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) [ 1540.064210] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:38 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1540.171368] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1540.188254] binder: 32142:32145 ERROR: BC_REGISTER_LOOPER called without request [ 1540.201236] binder: 32142:32145 unknown command 4743953 [ 1540.201309] binder: 32142:32145 ioctl c0306201 20000080 returned -22 [ 1540.282848] binder: BINDER_SET_CONTEXT_MGR already set 00:25:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r2, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r4]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) [ 1540.282857] binder: 32142:32161 ioctl 40046207 0 returned -16 [ 1540.283364] binder_alloc: 32142: binder_alloc_buf, no vma 00:25:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.283476] binder: 32142:32145 transaction failed 29189/-3, size 24-8 line 3136 [ 1540.283950] binder: 32142:32161 ERROR: BC_REGISTER_LOOPER called without request [ 1540.329218] binder: 32142:32145 unknown command 4743953 [ 1540.329236] binder: 32142:32145 ioctl c0306201 20000080 returned -22 [ 1540.336876] binder: release 32142:32145 transaction 590 in, still active 00:25:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.336883] binder: send failed reply for transaction 590 to 32142:32145 [ 1540.336990] binder: undelivered TRANSACTION_COMPLETE 00:25:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.336997] binder: undelivered TRANSACTION_ERROR: 29189 [ 1540.381558] binder: undelivered TRANSACTION_ERROR: 29189 [ 1540.518566] binder: 32165:32166 ERROR: BC_REGISTER_LOOPER called without request [ 1540.524780] binder: 32165:32166 unknown command 4743953 00:25:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.525101] binder: 32165:32166 ioctl c0306201 20000080 returned -22 [ 1540.584570] binder: release 32165:32166 transaction 595 out, still active [ 1540.584582] binder: unexpected work type, 4, not freed 00:25:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.584585] binder: undelivered TRANSACTION_COMPLETE [ 1540.587480] binder: release 32165:32166 transaction 595 in, still active [ 1540.587486] binder: send failed reply for transaction 595, target dead [ 1540.706213] binder: 32168:32169 ERROR: BC_REGISTER_LOOPER called without request [ 1540.713293] binder: 32168:32169 unknown command 4743953 00:25:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.713303] binder: 32168:32169 ioctl c0306201 20000080 returned -22 [ 1540.764821] binder: release 32168:32169 transaction 599 out, still active [ 1540.764827] binder: unexpected work type, 4, not freed [ 1540.764830] binder: undelivered TRANSACTION_COMPLETE [ 1540.792618] binder: release 32168:32169 transaction 599 in, still active [ 1540.792624] binder: send failed reply for transaction 599, target dead [ 1540.967515] binder: 32172:32178 ERROR: BC_REGISTER_LOOPER called without request 00:25:39 executing program 1: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:39 executing program 2: removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x2000080015, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) inotify_init() r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@ax25, &(0x7f0000000200)=0x80) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x1, 0x80000000, 0x80, 0x4}, 0xc) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 00:25:39 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1540.967686] binder: 32172:32178 unknown command 4743953 [ 1540.967695] binder: 32172:32178 ioctl c0306201 20000080 returned -22 [ 1540.971818] binder: release 32172:32178 transaction 603 out, still active [ 1540.971823] binder: unexpected work type, 4, not freed [ 1540.971826] binder: undelivered TRANSACTION_COMPLETE [ 1541.017763] binder: release 32172:32178 transaction 603 in, still active 00:25:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1541.017770] binder: send failed reply for transaction 603, target dead [ 1541.114163] binder: 32179:32181 ERROR: BC_REGISTER_LOOPER called without request [ 1541.114277] binder: 32179:32181 unknown command 4743953 [ 1541.114285] binder: 32179:32181 ioctl c0306201 20000080 returned -22 [ 1541.172501] binder: release 32179:32181 transaction 607 out, still active [ 1541.172507] binder: unexpected work type, 4, not freed [ 1541.172510] binder: undelivered TRANSACTION_COMPLETE [ 1541.181507] binder: release 32179:32181 transaction 607 in, still active [ 1541.181513] binder: send failed reply for transaction 607, target dead 00:25:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1541.393372] binder: 32194:32195 ERROR: BC_REGISTER_LOOPER called without request [ 1541.427238] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1541.431487] binder: 32194:32202 unknown command 4743953 [ 1541.431497] binder: 32194:32202 ioctl c0306201 20000080 returned -22 [ 1541.463597] binder: release 32194:32195 transaction 611 out, still active [ 1541.463602] binder: unexpected work type, 4, not freed [ 1541.463605] binder: undelivered TRANSACTION_COMPLETE [ 1541.499501] binder: release 32194:32195 transaction 611 in, still active [ 1541.499508] binder: send failed reply for transaction 611, target dead 00:25:40 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:40 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1541.834354] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1541.865241] binder: 32208:32211 ERROR: BC_REGISTER_LOOPER called without request 00:25:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) [ 1541.905006] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1541.913518] binder: 32208:32212 unknown command 4743953 [ 1541.913528] binder: 32208:32212 ioctl c0306201 20000080 returned -22 [ 1541.969522] binder: release 32208:32211 transaction 615 in, still active [ 1542.011016] binder: send failed reply for transaction 615 to 32208:32211 [ 1542.045302] binder: undelivered TRANSACTION_COMPLETE [ 1542.059722] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1542.091261] binder: undelivered TRANSACTION_ERROR: 29189 00:25:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:40 executing program 7: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 00:25:40 executing program 4: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000009) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000380)) getpeername$unix(r2, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r3 = getpid() mq_notify(r1, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r3}) syncfs(r2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x543000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000240)) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000005c0)=0x4) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) [ 1542.131093] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:41 executing program 7: mkdir(&(0x7f0000001500)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000540)='./file0/bus\x00', &(0x7f0000000580)) 00:25:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:41 executing program 4: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000009) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000380)) getpeername$unix(r2, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r3 = getpid() mq_notify(r1, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r3}) syncfs(r2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x543000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000240)) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000005c0)=0x4) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 00:25:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 00:25:41 executing program 7: mkdir(&(0x7f0000001500)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000540)='./file0/bus\x00', &(0x7f0000000580)) [ 1542.306406] binder: 32235:32242 ERROR: BC_REGISTER_LOOPER called without request [ 1542.352977] binder: 32235:32242 unknown command 4743953 [ 1542.379306] binder: 32235:32242 ioctl c0306201 20000080 returned -22 00:25:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 1542.451678] binder: release 32235:32242 transaction 619 out, still active [ 1542.463935] binder: unexpected work type, 4, not freed [ 1542.479504] binder: undelivered TRANSACTION_COMPLETE [ 1542.511472] binder: release 32235:32242 transaction 619 in, still active [ 1542.518320] binder: send failed reply for transaction 619, target dead 00:25:41 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f0000000180)='system\x00', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x21) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115d04, 0xc800) 00:25:41 executing program 4: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000009) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000380)) getpeername$unix(r2, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r3 = getpid() mq_notify(r1, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r3}) syncfs(r2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x543000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000240)) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000005c0)=0x4) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 00:25:41 executing program 7: mkdir(&(0x7f0000001500)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000540)='./file0/bus\x00', &(0x7f0000000580)) 00:25:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) recvmmsg(r2, &(0x7f0000007540)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000001440)}}], 0x1, 0x0, &(0x7f00000077c0)={0x0, 0x989680}) 00:25:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{}]}, 0x78) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 00:25:41 executing program 7: mkdir(&(0x7f0000001500)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000540)='./file0/bus\x00', &(0x7f0000000580)) 00:25:41 executing program 4: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80000000009) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f00000000c0)='bdev\x00') r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000380)) getpeername$unix(r2, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) mq_timedsend(r1, &(0x7f00000e6000), 0x0, 0x3, &(0x7f0000000540)) r3 = getpid() mq_notify(r1, &(0x7f0000000040)={0x0, 0x1b, 0x0, @tid=r3}) syncfs(r2) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x543000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000240)) getegid() ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000005c0)=0x4) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000fbc000)) close(r2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x4, 0x0, 0x2}, 0xc) 00:25:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r2, r1, 0x0) [ 1542.715959] binder: 32277:32281 ERROR: BC_REGISTER_LOOPER called without request [ 1542.763585] binder: 32277:32281 unknown command 4743953 [ 1542.782540] binder: 32277:32281 ioctl c0306201 20000080 returned -22 [ 1542.852974] binder: release 32277:32281 transaction 623 out, still active [ 1542.866540] binder: unexpected work type, 4, not freed [ 1542.878803] binder: undelivered TRANSACTION_COMPLETE [ 1542.889830] binder: release 32277:32281 transaction 623 in, still active 00:25:41 executing program 7: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) recvmmsg(r2, &(0x7f0000007540)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000001440)}}], 0x1, 0x0, &(0x7f00000077c0)={0x0, 0x989680}) 00:25:41 executing program 0: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:41 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1542.903774] binder: send failed reply for transaction 623, target dead 00:25:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_addrs=@nfc}) 00:25:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400), 0x4) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='veth1_to_bridge\x00'}) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) signalfd4(r0, &(0x7f0000001480)={0xffffffffffff7fff}, 0x8, 0x800) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) 00:25:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r2, r1, 0x0) 00:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) recvmmsg(r2, &(0x7f0000007540)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000001440)}}], 0x1, 0x0, &(0x7f00000077c0)={0x0, 0x989680}) 00:25:41 executing program 7: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 4: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 0: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:41 executing program 6: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_addrs=@nfc}) 00:25:41 executing program 7: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 4: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) recvmmsg(r2, &(0x7f0000007540)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000001440)}}], 0x1, 0x0, &(0x7f00000077c0)={0x0, 0x989680}) 00:25:41 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_addrs=@nfc}) 00:25:41 executing program 7: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) 00:25:41 executing program 6: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:41 executing program 0: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) [ 1543.149964] binder: 32316:32326 ERROR: BC_REGISTER_LOOPER called without request 00:25:42 executing program 4: r0 = add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="1c989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000f9f000)=""/125, 0x7d) [ 1543.195328] binder: 32316:32326 unknown command 4743953 [ 1543.231255] binder: 32316:32326 ioctl c0306201 20000080 returned -22 00:25:42 executing program 7: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:42 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'lo\x00', @ifru_addrs=@nfc}) 00:25:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2201, &(0x7f0000000080)) 00:25:42 executing program 6: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 00:25:42 executing program 0: setuid(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) finit_module(r0, &(0x7f00000001c0)='\x00', 0x0) ftruncate(r0, 0x1) 00:25:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r2, r1, 0x0) 00:25:42 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000280)={{0x4, 0x1}, 'port1\x00', 0x40, 0x40004, 0xfff, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1d) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) [ 1543.291315] binder: release 32316:32326 transaction 627 out, still active [ 1543.298420] binder: unexpected work type, 4, not freed [ 1543.306903] binder: undelivered TRANSACTION_COMPLETE [ 1543.328543] binder: release 32316:32326 transaction 627 in, still active 00:25:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2201, &(0x7f0000000080)) 00:25:42 executing program 6: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0xf8}], "e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae90082485a5a221d3c4905396664e6ae5099617de790"}, 0xb0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000500), 0x1000) 00:25:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x9, 0x0) [ 1543.375727] binder: send failed reply for transaction 627, target dead 00:25:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2201, &(0x7f0000000080)) 00:25:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x9, 0x0) 00:25:42 executing program 6: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0xf8}], "e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae90082485a5a221d3c4905396664e6ae5099617de790"}, 0xb0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000500), 0x1000) 00:25:42 executing program 7: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2201, &(0x7f0000000080)) 00:25:42 executing program 6: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0xf8}], "e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae90082485a5a221d3c4905396664e6ae5099617de790"}, 0xb0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000500), 0x1000) 00:25:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x9, 0x0) 00:25:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000280)={{0x4, 0x1}, 'port1\x00', 0x40, 0x40004, 0xfff, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1d) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 00:25:42 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) dup3(r2, r1, 0x0) 00:25:42 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x9, 0x0) 00:25:42 executing program 1: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:42 executing program 6: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0xf8}], "e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae90082485a5a221d3c4905396664e6ae5099617de790"}, 0xb0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000500), 0x1000) 00:25:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:42 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:42 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:42 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000280)={{0x4, 0x1}, 'port1\x00', 0x40, 0x40004, 0xfff, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1d) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 00:25:43 executing program 7: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:43 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:43 executing program 3: r0 = timerfd_create(0x10000000000008, 0x0) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 00:25:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000280)={{0x4, 0x1}, 'port1\x00', 0x40, 0x40004, 0xfff, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1d) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 00:25:43 executing program 1: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:43 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:43 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:43 executing program 6: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x101200, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='asymmetric\x00', 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getegid() fstat(0xffffffffffffffff, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='bic\x00', 0x4) socket$inet6(0xa, 0x802, 0x0) r4 = add_key(&(0x7f0000000740)='ceph\x00', &(0x7f0000000b40)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000b80), 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)="1de28d2865ab2bfb482064900f56b00af69ba2f7eb9e348e0e8cfe8944449900873750296d598667335d943f85b98449caee2ac2eab1fa7a67ac973bf84469029607808b776915b16a80f5707323e976ec89ce162c9b9dcca3d3a6d54a73425fb0458a64f39f57359d7972644fc84b5b75a4eee1790cdc69886f738c433f406f2ba5b892c337b38ca59764d8cc89c313d0b1fc40036d40d245f9eaccacf60da4028d4b307fc2cc1f8552fe87a64706d6fa8fe94742aa4e8098206b3c105453dc0ff96afb949312038e2ffd3c1b37e72d8dbe5ac7dd22cdd2933a495272ead839ae135e40394db5496be3f53d44b92289", 0xf0, r5) ioctl(r1, 0x1, &(0x7f00000009c0)="125fbe313bfb1efafb98a39b9275") sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) r6 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000580), &(0x7f0000000b40), 0x0, r6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="5e2a657468312c2e242826eb2a73656c696e75785b7b00", 0xfffffffffffffffb) getitimer(0x0, &(0x7f0000000180)) syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8}) getpgrp(0xffffffffffffffff) 00:25:43 executing program 3: r0 = timerfd_create(0x10000000000008, 0x0) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 00:25:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x109, 0x2, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:25:43 executing program 3: r0 = timerfd_create(0x10000000000008, 0x0) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 00:25:44 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x109, 0x2, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:25:44 executing program 3: r0 = timerfd_create(0x10000000000008, 0x0) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r1, r0, 0x0) 00:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x109, 0x2, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:25:44 executing program 7: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:44 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) recvfrom(r1, &(0x7f00000000c0)=""/251, 0x109, 0x2, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8df0d47434cdbcd50af760189e41d163f0fc8a3fcd8091d7e462359ba12143866e68a9028c2ccc7c1fc5ae13c3f188e2e7d7b8b4d32be094067b9571df0821"}, 0x709000) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 00:25:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:44 executing program 1: userfaultfd(0x400000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000100)=""/172) mlockall(0x1) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:25:44 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:44 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/uts\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x440800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x949, 0x1b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5f9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x1) 00:25:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:44 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:45 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:45 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:45 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0xffffffffffffffac) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000400)) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x80003, 0x400, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000006c0)=@hopopts={0x2c, 0x18, [], [@jumbo={0xc2, 0x4, 0x8001}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x6, 0xe, 0x8, 0x7fffffff, [0xf4, 0x8, 0x7d, 0x4d, 0xffffffffde967c37, 0x4d626f4e, 0x6]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x8001, 0x57, "1be72521fe2db291a94568e76cc35f800bd87a93bfe6bd919ef9a7e8a0650306ad9ae5dc5356fa6128f86c6b093ad664f59c36b27fb49ef9a21be3ba84636c5388bafe7657271ca3f0b6ce684ac9368551c3ae9a45b8de"}]}, 0xd0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x100000000, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000580)=""/215) ppoll(&(0x7f00000000c0)=[{r1}, {r5, 0x10}, {r2, 0x1408}, {r2, 0x402}, {}, {r3, 0x80}], 0x6, &(0x7f0000000280), &(0x7f0000000440)={0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000002d40)={@remote}, &(0x7f0000002d80)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0xfffffffffffffffd}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001fde), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000300)=0x14) 00:25:45 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) geteuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) fsync(r0) 00:25:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x9) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000e90307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:46 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) geteuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) fsync(r0) 00:25:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x9) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000e90307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 00:25:46 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x9) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000e90307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x9}, 0x14}}, 0x0) 00:25:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x63, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) close(r3) dup3(r1, r2, 0x0) 00:25:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 00:25:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x9) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000e90307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:25:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x9}, 0x14}}, 0x0) 00:25:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x9}, 0x14}}, 0x0) 00:25:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 00:25:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x9}, 0x14}}, 0x0) 00:25:46 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) geteuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) fsync(r0) 00:25:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x63, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) close(r3) dup3(r1, r2, 0x0) 00:25:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 00:25:47 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f00000002c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 00:25:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000100), 0x4) ioctl$KDSKBLED(r0, 0x4b65, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x63, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) close(r3) dup3(r1, r2, 0x0) 00:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 00:25:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x63, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) close(r3) dup3(r1, r2, 0x0) 00:25:47 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000280)=ANY=[]) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7}, 0xfffffd37) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x6609, &(0x7f00000004c0)) geteuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) fsync(r0) 00:25:47 executing program 6: sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4000010, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x1, 0x7fff, 0x0, 0x0, 0x5}, 0x14) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 1548.514496] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:47 executing program 1: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') [ 1548.760374] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:47 executing program 6: sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4000010, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x1, 0x7fff, 0x0, 0x0, 0x5}, 0x14) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:25:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) [ 1548.949261] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:25:47 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:47 executing program 6: sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4000010, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x1, 0x7fff, 0x0, 0x0, 0x5}, 0x14) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:25:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:47 executing program 0: clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00005ebff8)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000704000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 00:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') 00:25:48 executing program 6: sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4000010, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x1, 0x7fff, 0x0, 0x0, 0x5}, 0x14) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:25:48 executing program 0: clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00005ebff8)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000704000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 00:25:48 executing program 0: clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00005ebff8)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000704000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 00:25:48 executing program 1: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:48 executing program 0: clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00005ebff8)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000704000)) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000004, 0x0) 00:25:48 executing program 6: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:48 executing program 4: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000800)=""/4096, 0x1000) ioprio_get$pid(0x0, 0x0) poll(&(0x7f0000000100)=[{}, {r0, 0x410}], 0x238a, 0x5f) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7fffffff, 0x2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001800)=@req={0x671d, 0xb79, 0x9}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x0, 0x40, 0x101, 0x0, 0x3, 0x0, 0x159, 0x40, 0x3c7, 0x0, 0xe069}, [{0x0, 0x4, 0x4f, 0x200, 0x80, 0x0, 0x80000000}], "9d38502a368f06f0399080500a1d4ac66836e64be89579ec1c94a5d506e4cdecd8fa30293a0ee7abf1c3382ac5862f7a41f05e9690cf13cfa821474f50a1077080fd49f7b423f2bfd2de0a21747f85f03a062d6a1c38db4eb286626417069ff27c4f36e0bc915eeaea9a1f3cddda473316345e52530b9160a740a47b8fb95e24f3d7ff0ffd75a947381b9b3e743d1adeec824fc61f06e6a243bfb0a31d4d998e3dee884898f90615807faedea601335ca11a", [[], []]}, 0x32a) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000240)) ioctl$int_in(r2, 0x0, &(0x7f00000000c0)=0x443d) socket$inet6(0xa, 0x0, 0x0) 00:25:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000800)=""/4096, 0x1000) ioprio_get$pid(0x0, 0x0) poll(&(0x7f0000000100)=[{}, {r0, 0x410}], 0x238a, 0x5f) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7fffffff, 0x2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001800)=@req={0x671d, 0xb79, 0x9}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x0, 0x40, 0x101, 0x0, 0x3, 0x0, 0x159, 0x40, 0x3c7, 0x0, 0xe069}, [{0x0, 0x4, 0x4f, 0x200, 0x80, 0x0, 0x80000000}], "9d38502a368f06f0399080500a1d4ac66836e64be89579ec1c94a5d506e4cdecd8fa30293a0ee7abf1c3382ac5862f7a41f05e9690cf13cfa821474f50a1077080fd49f7b423f2bfd2de0a21747f85f03a062d6a1c38db4eb286626417069ff27c4f36e0bc915eeaea9a1f3cddda473316345e52530b9160a740a47b8fb95e24f3d7ff0ffd75a947381b9b3e743d1adeec824fc61f06e6a243bfb0a31d4d998e3dee884898f90615807faedea601335ca11a", [[], []]}, 0x32a) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000240)) ioctl$int_in(r2, 0x0, &(0x7f00000000c0)=0x443d) socket$inet6(0xa, 0x0, 0x0) 00:25:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:48 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000300)=[{0x0, 0x800}, {0xa, 0x483}, {0x2, 0x3}, {0xb, 0x100}], 0x4) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000002c0)=[0x3f, 0x1]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) geteuid() ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000140)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000d300000029b220a75e04441d6ceebdd8683a2f299220f72235dcea252d31c18b3d6ddfe827f14775bb12c52dc762edd16629e77e818b93de9c1452f4b04d6102b8bc1c966fc2018b87f21fbaaafd93011c642b01000000fc236a7f1a258221a8b47f0c898a7e2234bd74c1b4a134d9370e21d64380d4c5b741995496c44675443a42b0a8654124917ced51deb9c068218665e7ecc08481fd28b652c5abce6a6326911ce47957cf2716b8526e3134e85213ad9c27ee9c9ca26fc0f2481ad2aaa6b5f5a583d6769b1832bf31c19ef9e148ecad88fba9dd"]) 00:25:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='/', 0x1, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x7f8) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 00:25:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000800)=""/4096, 0x1000) ioprio_get$pid(0x0, 0x0) poll(&(0x7f0000000100)=[{}, {r0, 0x410}], 0x238a, 0x5f) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7fffffff, 0x2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001800)=@req={0x671d, 0xb79, 0x9}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x0, 0x40, 0x101, 0x0, 0x3, 0x0, 0x159, 0x40, 0x3c7, 0x0, 0xe069}, [{0x0, 0x4, 0x4f, 0x200, 0x80, 0x0, 0x80000000}], "9d38502a368f06f0399080500a1d4ac66836e64be89579ec1c94a5d506e4cdecd8fa30293a0ee7abf1c3382ac5862f7a41f05e9690cf13cfa821474f50a1077080fd49f7b423f2bfd2de0a21747f85f03a062d6a1c38db4eb286626417069ff27c4f36e0bc915eeaea9a1f3cddda473316345e52530b9160a740a47b8fb95e24f3d7ff0ffd75a947381b9b3e743d1adeec824fc61f06e6a243bfb0a31d4d998e3dee884898f90615807faedea601335ca11a", [[], []]}, 0x32a) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000240)) ioctl$int_in(r2, 0x0, &(0x7f00000000c0)=0x443d) socket$inet6(0xa, 0x0, 0x0) 00:25:48 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') 00:25:48 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') 00:25:48 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') 00:25:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000800)=""/4096, 0x1000) ioprio_get$pid(0x0, 0x0) poll(&(0x7f0000000100)=[{}, {r0, 0x410}], 0x238a, 0x5f) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7fffffff, 0x2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001800)=@req={0x671d, 0xb79, 0x9}, 0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x0, 0x40, 0x101, 0x0, 0x3, 0x0, 0x159, 0x40, 0x3c7, 0x0, 0xe069}, [{0x0, 0x4, 0x4f, 0x200, 0x80, 0x0, 0x80000000}], "9d38502a368f06f0399080500a1d4ac66836e64be89579ec1c94a5d506e4cdecd8fa30293a0ee7abf1c3382ac5862f7a41f05e9690cf13cfa821474f50a1077080fd49f7b423f2bfd2de0a21747f85f03a062d6a1c38db4eb286626417069ff27c4f36e0bc915eeaea9a1f3cddda473316345e52530b9160a740a47b8fb95e24f3d7ff0ffd75a947381b9b3e743d1adeec824fc61f06e6a243bfb0a31d4d998e3dee884898f90615807faedea601335ca11a", [[], []]}, 0x32a) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000240)) ioctl$int_in(r2, 0x0, &(0x7f00000000c0)=0x443d) socket$inet6(0xa, 0x0, 0x0) 00:25:48 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') 00:25:48 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:49 executing program 1: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:49 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002d00)) syz_read_part_table(0x0, 0x1, &(0x7f0000001540)=[{&(0x7f0000000480)="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", 0x1da, 0x9}]) 00:25:49 executing program 6: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:49 executing program 4: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) 00:25:49 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x181001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0) 00:25:49 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0xa, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 00:25:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) 00:25:49 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:49 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) [ 1550.851817] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) 00:25:49 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) [ 1550.966290] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) 00:25:49 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:49 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0xa, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 00:25:49 executing program 6: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 1551.196806] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:50 executing program 4: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) 00:25:50 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:50 executing program 1: socket$inet6(0xa, 0x807, 0x80000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x1) pipe(&(0x7f0000000100)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0xa, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 00:25:50 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000340)) r1 = eventfd(0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000008) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x4200, 0x0) tkill(r0, 0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) write$P9_RRENAMEAT(r3, &(0x7f00000003c0)={0x7}, 0x7) 00:25:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x1d2}}, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000000)={'tunl0\x00', @ifru_map={0x2, 0x9, 0x3, 0xe01, 0xfffffffffffffffa, 0x81}}) [ 1551.453477] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:50 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0xa, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 00:25:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1000000000000002}, 0x20) 00:25:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1000000000000002}, 0x20) [ 1551.661183] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:50 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1000000000000002}, 0x20) 00:25:50 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 00:25:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1000000000000002}, 0x20) 00:25:51 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x23e}}, 0x0) 00:25:51 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:51 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x23e}}, 0x0) 00:25:51 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x23e}}, 0x0) 00:25:51 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) gettid() r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x52) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) eventfd(0x401) ioctl$fiemap(r2, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) 00:25:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x23e}}, 0x0) 00:25:51 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:51 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:52 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:52 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e) socket$packet(0x11, 0xa, 0x300) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000f4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000300)=""/110) ioctl$KDDELIO(r1, 0x4b35, 0x1) pipe(&(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80840, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:52 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:52 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:52 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:52 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:52 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:52 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:53 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:53 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @link_local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000340)={0x3, 0x1, 'client1\x00', 0x2, "a48979dc50ffd2fd", "ca72f4b87a192fb0910d3f55bebfe511eae7095458a252729719a7b9edcdad0e"}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x10000080002, 0x0) r3 = dup2(r1, r2) read(r3, &(0x7f00000000c0)=""/85, 0x321) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001000160009007ce3540fcd010008000300", @ANYRES32=0x0], 0x2}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:25:53 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:53 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:53 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bfs\x00', 0x20000, &(0x7f0000000540)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 00:25:53 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bfs\x00', 0x20000, &(0x7f0000000540)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 00:25:53 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:53 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7fffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) ioctl$KDDISABIO(r1, 0x4b37) fallocate(r1, 0x1, 0x0, 0x10000101) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='(securityppp1\x00', 0xfffffffffffffffc) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x332, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) recvfrom$packet(r1, &(0x7f0000000200)=""/188, 0xbc, 0x2002, &(0x7f0000000400)={0x11, 0x9, r2, 0x1, 0x1}, 0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @rand_addr}, &(0x7f0000000180)=0xc) recvfrom$packet(r1, &(0x7f00000000c0)=""/51, 0x33, 0x1, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0x8b7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:25:53 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bfs\x00', 0x20000, &(0x7f0000000540)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 00:25:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r2) 00:25:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r2) 00:25:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r0, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000940)=@ax25, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000a00)=""/36, 0x24}}], 0x1, 0x0, &(0x7f0000003000)) 00:25:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r2) 00:25:54 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x78) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @multicast2, @rand_addr}, &(0x7f0000000380)=0xc) 00:25:54 executing program 6: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bfs\x00', 0x20000, &(0x7f0000000540)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 00:25:54 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r2) 00:25:54 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:54 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000240)={{}, 'syz1\x00', 0x13}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) 00:25:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000000)="abb1a501df7e659e926f555983723046e975d086b77ea44ca455de9ed59bafac37", &(0x7f0000001600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 00:25:54 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000cc0)=0x6f45effa) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000bc0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) request_key(&(0x7f0000000940)="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", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 00:25:54 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) fstat(r0, &(0x7f0000000900)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) syz_open_procfs(r1, &(0x7f0000000200)='net/snmp6\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101100) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000300)=""/38) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5) ioctl$TIOCNOTTY(r3, 0x5422) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r2, 0x1) 00:25:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/163, 0xa3) getdents64(r0, &(0x7f0000000240)=""/91, 0x5b) 00:25:54 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000cc0)=0x6f45effa) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000bc0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) request_key(&(0x7f0000000940)="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", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 00:25:54 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:25:54 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl(r0, 0xc0084904, &(0x7f0000000000)) 00:25:54 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000cc0)=0x6f45effa) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000bc0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) request_key(&(0x7f0000000940)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df310c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee500389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54cf4e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc9391960c1bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 00:25:54 executing program 4: sched_setaffinity(0x0, 0x3bd, &(0x7f00000004c0)) r0 = perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) add_key(&(0x7f0000003ac0)='dns_resolver\x00', &(0x7f0000003b00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000003b40), 0x0, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0), &(0x7f0000000300)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0xd800c, 0x3, 0x2, 0x2, 0x0, 0x7, 0xffffffffffff0000, 0x7fff, 0x0, 0x7, 0x0, 0xf3ec, 0x0, 0x0, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7, 0x0, 0x81, 0x0, 0x480000000000000, 0x0, 0x3, 0xd74, 0x0, 0x0, 0x9, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x1, 0xfff}, 0x0, 0x2, r0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000003b80)=0x80, 0x80000) r2 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) 00:25:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x0, 0x1, 0x0, 0x8, 0x9}, &(0x7f00000005c0)=0x20) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) [ 1555.892712] attempt to access beyond end of device [ 1555.919177] loop0: rw=0, want=11307866476490730, limit=264192 [ 1555.959173] attempt to access beyond end of device [ 1555.976931] loop0: rw=0, want=11307866476490724, limit=264192 [ 1555.996122] buffer_io_error: 86 callbacks suppressed [ 1555.996130] Buffer I/O error on dev loop0p105, logical block 7533491034799680, async page read [ 1556.045677] attempt to access beyond end of device [ 1556.067792] loop0: rw=0, want=11307866476490726, limit=264192 [ 1556.116953] Buffer I/O error on dev loop0p105, logical block 7533491034799681, async page read [ 1556.149356] attempt to access beyond end of device [ 1556.171965] loop0: rw=0, want=11307866476490728, limit=264192 [ 1556.177962] Buffer I/O error on dev loop0p105, logical block 7533491034799682, async page read [ 1556.195630] attempt to access beyond end of device [ 1556.210527] loop0: rw=0, want=11307866476490730, limit=264192 [ 1556.216473] Buffer I/O error on dev loop0p105, logical block 7533491034799683, async page read [ 1556.241008] attempt to access beyond end of device [ 1556.245956] loop0: rw=0, want=11307866476490938, limit=264192 [ 1556.261058] attempt to access beyond end of device [ 1556.266174] loop0: rw=0, want=11307866476490932, limit=264192 00:25:55 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) 00:25:55 executing program 4: sched_setaffinity(0x0, 0x3bd, &(0x7f00000004c0)) r0 = perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) add_key(&(0x7f0000003ac0)='dns_resolver\x00', &(0x7f0000003b00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000003b40), 0x0, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0), &(0x7f0000000300)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0xd800c, 0x3, 0x2, 0x2, 0x0, 0x7, 0xffffffffffff0000, 0x7fff, 0x0, 0x7, 0x0, 0xf3ec, 0x0, 0x0, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7, 0x0, 0x81, 0x0, 0x480000000000000, 0x0, 0x3, 0xd74, 0x0, 0x0, 0x9, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x1, 0xfff}, 0x0, 0x2, r0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000003b80)=0x80, 0x80000) r2 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) 00:25:55 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3d70fb5d4c5b866305249060000005277822d0e0616a2e5b74c48e38b9936f298c6feec95ad327c724ec507bd34b94e99623f014bf81ea54900ac54a99aa04e1a7f000000e8d3bfa2f3abce9736aac3e0b19d5a697bc438cd49bc1cf3af72c2180bbee78e9a7237c02e10ac77e3a4fd8a6e2bdca6a9a1d7da1a3e559fdafb6703c73b3c4c10865302fb324f16327996273625d9f0a54ef16bdb08f22ed11fd80b74eb861aebe51b0912c0f79486c25c49524ffe4f00", 0xf2, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast2}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000cc0)=0x6f45effa) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000bc0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) request_key(&(0x7f0000000940)="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", &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0x0) 00:25:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x0, 0x1, 0x0, 0x8, 0x9}, &(0x7f00000005c0)=0x20) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) [ 1556.272574] Buffer I/O error on dev loop0p105, logical block 7533491034799784, async page read [ 1556.305210] attempt to access beyond end of device [ 1556.323732] loop0: rw=0, want=11307866476490934, limit=264192 [ 1556.332950] Buffer I/O error on dev loop0p105, logical block 7533491034799785, async page read [ 1556.362014] attempt to access beyond end of device [ 1556.373192] loop0: rw=0, want=11307866476490936, limit=264192 [ 1556.382657] Buffer I/O error on dev loop0p105, logical block 7533491034799786, async page read [ 1556.401984] attempt to access beyond end of device [ 1556.407374] loop0: rw=0, want=11307866476490938, limit=264192 [ 1556.413998] Buffer I/O error on dev loop0p105, logical block 7533491034799787, async page read 00:25:55 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:55 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:25:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100), 0x4) 00:25:55 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001010}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000580)="c5", 0x1}], 0x1) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 00:25:55 executing program 4: sched_setaffinity(0x0, 0x3bd, &(0x7f00000004c0)) r0 = perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) add_key(&(0x7f0000003ac0)='dns_resolver\x00', &(0x7f0000003b00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000003b40), 0x0, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0), &(0x7f0000000300)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0xd800c, 0x3, 0x2, 0x2, 0x0, 0x7, 0xffffffffffff0000, 0x7fff, 0x0, 0x7, 0x0, 0xf3ec, 0x0, 0x0, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7, 0x0, 0x81, 0x0, 0x480000000000000, 0x0, 0x3, 0xd74, 0x0, 0x0, 0x9, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x1, 0xfff}, 0x0, 0x2, r0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000003b80)=0x80, 0x80000) r2 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) [ 1556.426516] attempt to access beyond end of device 00:25:55 executing program 4: sched_setaffinity(0x0, 0x3bd, &(0x7f00000004c0)) r0 = perf_event_open(&(0x7f0000001580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000001c0)={0x0, 0xffff}) r1 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) add_key(&(0x7f0000003ac0)='dns_resolver\x00', &(0x7f0000003b00)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000003b40), 0x0, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0), &(0x7f0000000300)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000440)={'xcbc(serpent)\x00'}}) getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0xd800c, 0x3, 0x2, 0x2, 0x0, 0x7, 0xffffffffffff0000, 0x7fff, 0x0, 0x7, 0x0, 0xf3ec, 0x0, 0x0, 0x81, 0x7, 0x5, 0x0, 0x2, 0x7, 0x0, 0x81, 0x0, 0x480000000000000, 0x0, 0x3, 0xd74, 0x0, 0x0, 0x9, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x1, 0xfff}, 0x0, 0x2, r0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000003b80)=0x80, 0x80000) r2 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000), 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000140)="3b8736d38c7c2c51ec576085f398d646c87890cd11925c3f5cc284f1bdc9c34063485a3980fbd65f5100000000000000", 0x30) 00:25:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001010}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000580)="c5", 0x1}], 0x1) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 00:25:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x0, 0x1, 0x0, 0x8, 0x9}, &(0x7f00000005c0)=0x20) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000675bd1000000000000000000000000000000000000000000000000000000000093000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003acdb7c7a66a4ce21e126cc842310c90316a9b61c9b605efe97c2ea5d215a26e03f2442e9e259a3e7276e5a51b6a0aa7e87729b3946561c7cb6cdf40562e7e9b409e065cca04aaba12b8c9f456a09290f0f73850f59f2a265f501ba188d123a746a4882cf36e4abf237af086e90b8c658471411ef80e5fbac96446614c77c20323786a8ec5f06976782dd464d100b3af6a28dad243ae28b500761fbdbc2726252e64c5ae213c3fe8427ec0631c0bd1f99e642da50d271b9aa073b27f62ade93127fe97032c23f7e18508d1839bb8df34c9e18616b06d53439523743ad05c0d40bb0b13160a367d8dd545fcfff62c79b49d89f8963ef2c184385ae55157575d9c96eaa445727457fa4a2fe4663fa84fb353851565f29f53bd5370f583644e2238f1f759307a40660db424f4929fd19133673c9621b9947e27acf7e8bc10c9f108509a16f1d14bf512be67794756dfd099d6911d483832a4c2c46d58111e9c4798edd41f6d3aef82d8301a0bb691dc15ec418d5e2b5825c80797c4918197cf41f4b89915ef456fcc5bb0059a6ef9de6f7fa4746f740fac00e2d7d92f8fb3757cc6074a68f0afd6cf8822dd1d0067e4b2cf74859e35216c5b001e8bb85504445fde017e26198474e0f8cd54b54344d23ac018248bfcd021a18711f6c997ba170fdf24176f435c97e1693ca931488f7aed03c39385ba2a827b26d5556c9c6a7752011356fa129fb5c3041ba3153d0f12aa16e8f86b6869a5277c42d1c196926834f851c95e0f117e646c17ac5de82848f27995d6c64ba406580fd88205e116878c84b4cd2b7312e8843d6b89bffa0c454e48ba67afa043186633512adc44948c09a448fadddd73733e09e1fc5f3d0a02e62a9f91dff179ddc28f0a79727d5d5b8a0b8b5fc047ca8848a8902fedab0a8595924452f5bea0555fd086786a9f3506d81a387c4cc7ad1aa24b5589083458ac8d1e33143c63df224444a0aa29419236125cbf6a7be9f9d06d425b00b19d91385e4ee3b29fb9aa2155179c7178f6b14bcc986b67a19f5a60d474838dd495df96ed4f50b0b83e7f625b7a1146dcdcf2ad6f99a709bf3adbc7efc6520439c8e1386ad00a915501eb624ab8901490ee762c423fe003c38fb27ca602375f5d699453c78caf1d8f835567e222919aa3f5c8677deac5df43040df986f880e97c0a52d17c5e4eca99be3d3dcbfec37b095e8c948828b7379168881fa976da2d45190a94f79e60230c35f3bef7f391992f8c8fce94db008c31e4d6e14acdc2c61b184da53c392794234d2b8ae929"], 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) [ 1556.448263] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1556.472637] attempt to access beyond end of device [ 1556.503730] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1556.522436] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1556.551662] attempt to access beyond end of device [ 1556.565154] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1556.580536] Buffer I/O error on dev loop0p105, logical block 1, async page read 00:25:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001010}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000580)="c5", 0x1}], 0x1) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 00:25:55 executing program 4: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000100)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000580)={@local, 0x0, 0x1, 0x0, 0x8, 0x9}, &(0x7f00000005c0)=0x20) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x11, &(0x7f0000000800)="d8c466ce64354ae542ccfa3044ae0e6b69"}) [ 1556.602163] attempt to access beyond end of device [ 1556.614435] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1556.640459] attempt to access beyond end of device [ 1556.670704] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1556.700101] attempt to access beyond end of device [ 1556.716112] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1556.731337] attempt to access beyond end of device [ 1556.742610] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1556.757575] attempt to access beyond end of device [ 1556.769211] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1556.784844] attempt to access beyond end of device [ 1556.800824] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1556.815259] attempt to access beyond end of device [ 1556.827024] loop0: rw=0, want=11307866476490948, limit=264192 [ 1556.842444] attempt to access beyond end of device [ 1556.855929] loop0: rw=0, want=11307866476490950, limit=264192 [ 1556.870955] attempt to access beyond end of device [ 1556.882921] loop0: rw=0, want=11307866476490952, limit=264192 [ 1556.896953] attempt to access beyond end of device [ 1556.910450] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1556.925421] attempt to access beyond end of device [ 1556.937056] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1556.951374] attempt to access beyond end of device [ 1556.963358] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1556.978333] attempt to access beyond end of device [ 1556.991057] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1557.004333] attempt to access beyond end of device [ 1557.017338] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1557.031842] attempt to access beyond end of device [ 1557.042477] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1557.056485] attempt to access beyond end of device [ 1557.067498] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1557.083438] attempt to access beyond end of device [ 1557.098313] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1557.112619] attempt to access beyond end of device [ 1557.125170] loop0: rw=0, want=11307866476490940, limit=264192 [ 1557.133208] attempt to access beyond end of device [ 1557.147957] loop0: rw=0, want=11307866476490942, limit=264192 [ 1557.161333] attempt to access beyond end of device [ 1557.173624] loop0: rw=0, want=11307866476490944, limit=264192 [ 1557.179760] attempt to access beyond end of device [ 1557.185533] loop0: rw=0, want=11307866476490946, limit=264192 00:25:56 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) 00:25:56 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:25:56 executing program 1: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001010}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000580)="c5", 0x1}], 0x1) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl(r1, 0xc020660b, &(0x7f0000000000)) 00:25:56 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:56 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:56 executing program 4: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1557.195352] attempt to access beyond end of device [ 1557.200534] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1557.208643] attempt to access beyond end of device [ 1557.219745] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1557.238816] attempt to access beyond end of device [ 1557.274289] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1557.280532] attempt to access beyond end of device [ 1557.291764] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1557.321144] attempt to access beyond end of device 00:25:56 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1557.346706] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1557.378070] attempt to access beyond end of device 00:25:56 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1557.400995] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1557.430969] attempt to access beyond end of device 00:25:56 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 1557.471522] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1557.502083] attempt to access beyond end of device [ 1557.530863] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1557.537062] attempt to access beyond end of device [ 1557.567239] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1557.584606] attempt to access beyond end of device [ 1557.608655] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1557.638211] attempt to access beyond end of device [ 1557.659794] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1557.715416] attempt to access beyond end of device [ 1557.720434] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1557.729357] attempt to access beyond end of device [ 1557.757370] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1557.791123] attempt to access beyond end of device 00:25:56 executing program 6: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1557.804558] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1557.834130] attempt to access beyond end of device [ 1557.856674] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1557.892452] attempt to access beyond end of device [ 1557.910821] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1557.916999] attempt to access beyond end of device [ 1557.944558] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1557.975691] attempt to access beyond end of device [ 1557.998483] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1558.031611] attempt to access beyond end of device [ 1558.070844] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1558.089096] attempt to access beyond end of device 00:25:56 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.123316] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1558.162531] attempt to access beyond end of device 00:25:56 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) [ 1558.191129] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1558.228973] attempt to access beyond end of device 00:25:57 executing program 4: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:57 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.254888] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1558.262038] attempt to access beyond end of device [ 1558.275952] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1558.307773] attempt to access beyond end of device [ 1558.335682] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1558.363628] attempt to access beyond end of device 00:25:57 executing program 1: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:57 executing program 0: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.388250] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1558.417131] attempt to access beyond end of device [ 1558.441036] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1558.474897] attempt to access beyond end of device [ 1558.498672] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1558.529462] attempt to access beyond end of device 00:25:57 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.555278] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1558.585338] attempt to access beyond end of device [ 1558.610379] loop0: rw=0, want=18442984958116445028, limit=264192 [ 1558.648931] attempt to access beyond end of device [ 1558.680417] loop0: rw=0, want=18442984958116445030, limit=264192 [ 1558.712357] attempt to access beyond end of device [ 1558.738265] loop0: rw=0, want=18442984958116445032, limit=264192 [ 1558.767991] attempt to access beyond end of device [ 1558.792283] loop0: rw=0, want=18442984958116445034, limit=264192 [ 1558.824191] attempt to access beyond end of device 00:25:57 executing program 6: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.849551] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1558.881625] attempt to access beyond end of device [ 1558.907091] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1558.938937] attempt to access beyond end of device 00:25:57 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1558.966756] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1558.995903] attempt to access beyond end of device [ 1559.031368] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1559.094146] attempt to access beyond end of device 00:25:57 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000300)='./bus\x00', 0xa00) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) [ 1559.123617] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1559.152604] attempt to access beyond end of device [ 1559.181012] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1559.239432] attempt to access beyond end of device 00:25:58 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1559.264579] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1559.299727] attempt to access beyond end of device 00:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f03000000450001070000001419001a00040023000700f0000200000809c99183a8a5000200", 0x39}], 0x1) 00:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f03000000450001070000001419001a00040023000700f0000200000809c99183a8a5000200", 0x39}], 0x1) 00:25:58 executing program 1: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1559.322626] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1559.349821] attempt to access beyond end of device [ 1559.366672] loop0: rw=0, want=18442984958116442980, limit=264192 00:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f03000000450001070000001419001a00040023000700f0000200000809c99183a8a5000200", 0x39}], 0x1) 00:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001100090469001b00810800000700fd3f03000000450001070000001419001a00040023000700f0000200000809c99183a8a5000200", 0x39}], 0x1) [ 1559.389880] attempt to access beyond end of device [ 1559.404349] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1559.429006] attempt to access beyond end of device 00:25:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00007b1000), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x27) openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000040000cb0000000000000000cc0000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000000000000000000000cc378c33cb2eda936530c9facf929ed50000000000000000082a6babbd23ab1c"], 0x6f) [ 1559.459363] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1559.497324] attempt to access beyond end of device 00:25:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0x800000) [ 1559.523224] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1559.556155] attempt to access beyond end of device 00:25:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 00:25:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x808000000002, 0x300) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000140)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 1559.575706] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1559.608367] attempt to access beyond end of device 00:25:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 00:25:58 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="2e820e85843ec6cd4e48b6be0bfe3d1bc897f5989e435a196fae2c51e1a398e32f"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) socketpair(0x11, 0x805, 0x80000001, &(0x7f00000002c0)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001600)=""/4096) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1559.638036] loop0: rw=0, want=18442984958116442982, limit=264192 00:25:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 1559.685724] attempt to access beyond end of device [ 1559.719062] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1559.752324] attempt to access beyond end of device [ 1559.772014] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1559.796708] attempt to access beyond end of device [ 1559.814754] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1559.843837] attempt to access beyond end of device [ 1559.863900] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1559.880969] attempt to access beyond end of device 00:25:58 executing program 6: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xffffffff, 0x2, 0x8, 0x5, 0x0, 0xb2, 0x0, 0xd, 0x3f, 0x8000, 0x8, 0x2, 0x5, 0x400, 0x800, 0xc2, 0x1, 0x80000001, 0xfffffffffffffffe, 0x8, 0x9, 0x101, 0x2, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0x0, 0x8001, 0x1, 0x7fffffff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x200, 0x7, 0x6, 0x6, 0x1ff, 0x1700000000000000}, r0, 0xc, r1, 0xb) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:58 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 1559.893738] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1559.917821] attempt to access beyond end of device [ 1559.947560] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1559.985163] attempt to access beyond end of device [ 1560.016096] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1560.042710] attempt to access beyond end of device [ 1560.058227] loop0: rw=0, want=18442984958116442982, limit=264192 00:25:58 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 1560.067382] attempt to access beyond end of device [ 1560.080117] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1560.105031] attempt to access beyond end of device [ 1560.128773] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1560.163660] attempt to access beyond end of device [ 1560.168239] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1560.168249] CPU: 1 PID: 797 Comm: syz-executor5 Not tainted 4.9.123-g8dd3fc2 #27 [ 1560.168253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.168269] ffff8801887af610 ffffffff81eb9689 0000000000000002 0000000000000000 [ 1560.168282] ffff8801c1ad8300 ffff8801887af7e0 0000000000000000 ffff8801887af808 00:25:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 00:25:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x808000000002, 0x300) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000140)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 00:25:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5401, 0x0) 00:25:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000001740), 0x79ffffffffffff) [ 1560.168294] ffffffff81cbfe4b 00000000000038a6 ffff8801b86be930 ffff8801c1ad840c 00:25:59 executing program 1: r0 = socket(0x11, 0x80a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000046c0)={&(0x7f0000000000), 0xc, &(0x7f0000004680)={&(0x7f0000004280)={0x14}, 0x14}}, 0x0) 00:25:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5401, 0x0) 00:25:59 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0xfffc, 0x7fff) [ 1560.168297] Call Trace: [ 1560.168312] [] dump_stack+0xc1/0x128 00:25:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5401, 0x0) 00:25:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) getpgid(0xffffffffffffffff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 00:25:59 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/247, 0x245}], 0x1) 00:25:59 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5401, 0x0) [ 1560.168325] [] handle_userfault.cold.18+0x3e/0x51 [ 1560.168338] [] ? debug_check_no_locks_freed+0x210/0x210 [ 1560.168352] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 1560.168364] [] ? check_preemption_disabled+0x3b/0x170 [ 1560.168376] [] ? handle_mm_fault+0x12e6/0x2a00 [ 1560.168384] [] ? handle_mm_fault+0x221f/0x2a00 [ 1560.168393] [] handle_mm_fault+0x222d/0x2a00 [ 1560.168401] [] ? vm_insert_mixed+0x280/0x280 00:25:59 executing program 1: r0 = socket(0x11, 0x80a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000046c0)={&(0x7f0000000000), 0xc, &(0x7f0000004680)={&(0x7f0000004280)={0x14}, 0x14}}, 0x0) 00:25:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x0, 0x65a, 0x0, 0x0, 0x3cb, 0xf5, 0x100}, "", [[], [], [], [], [], []]}, 0x620) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) [ 1560.168409] [] ? __lock_is_held+0xa2/0xf0 [ 1560.168420] [] __do_page_fault+0x5af/0xd50 [ 1560.168431] [] ? mm_fault_error+0x2c0/0x2c0 [ 1560.168441] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1560.168449] [] do_page_fault+0x27/0x30 [ 1560.168460] [] page_fault+0x28/0x30 [ 1560.168470] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 1560.168482] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 1560.168492] [] ? str_to_user+0xa0/0xa0 [ 1560.168501] [] ? __lock_acquire+0x654/0x4070 [ 1560.168510] [] ? exit_robust_list+0x220/0x220 [ 1560.168519] [] evdev_ioctl+0x27/0x30 [ 1560.168530] [] ? evdev_ioctl_compat+0x30/0x30 [ 1560.168551] [] do_vfs_ioctl+0x1ac/0x11a0 [ 1560.168562] [] ? ioctl_preallocate+0x220/0x220 00:25:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 1560.168574] [] ? selinux_capable+0x40/0x40 [ 1560.168583] [] ? __fget+0x20a/0x3b0 [ 1560.168593] [] ? __fget+0x231/0x3b0 [ 1560.168602] [] ? __fget+0x47/0x3b0 [ 1560.168613] [] ? security_file_ioctl+0x8f/0xc0 [ 1560.168622] [] SyS_ioctl+0x8f/0xc0 [ 1560.168633] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 1560.168643] [] do_syscall_64+0x1a6/0x490 [ 1560.168654] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1560.860928] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1560.867155] attempt to access beyond end of device [ 1560.872867] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1560.879105] attempt to access beyond end of device [ 1560.884446] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1560.890675] attempt to access beyond end of device [ 1560.897980] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1560.904875] attempt to access beyond end of device [ 1560.909823] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1560.916489] attempt to access beyond end of device [ 1560.921457] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1560.927598] attempt to access beyond end of device [ 1560.932609] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1560.938751] attempt to access beyond end of device [ 1560.943708] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1560.949873] attempt to access beyond end of device 00:25:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 00:25:59 executing program 1: r0 = socket(0x11, 0x80a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000046c0)={&(0x7f0000000000), 0xc, &(0x7f0000004680)={&(0x7f0000004280)={0x14}, 0x14}}, 0x0) 00:25:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x808000000002, 0x300) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000140)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 00:25:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newneigh={0x34, 0x1c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_MAC={0xc, 0x1, @random="f7e9e2a4c5d2"}]}, 0x34}}, 0x0) 00:25:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x0, 0x65a, 0x0, 0x0, 0x3cb, 0xf5, 0x100}, "", [[], [], [], [], [], []]}, 0x620) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) [ 1560.954845] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1560.961033] attempt to access beyond end of device [ 1560.965976] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1560.972923] attempt to access beyond end of device [ 1560.977851] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1560.984488] attempt to access beyond end of device [ 1560.989417] loop0: rw=0, want=18442984958116442986, limit=264192 00:25:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newneigh={0x34, 0x1c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_MAC={0xc, 0x1, @random="f7e9e2a4c5d2"}]}, 0x34}}, 0x0) 00:25:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newneigh={0x34, 0x1c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_MAC={0xc, 0x1, @random="f7e9e2a4c5d2"}]}, 0x34}}, 0x0) [ 1561.020882] buffer_io_error: 88 callbacks suppressed [ 1561.020890] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1561.051181] attempt to access beyond end of device [ 1561.057281] loop0: rw=0, want=18442984958116442980, limit=264192 00:25:59 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210035004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 00:25:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newneigh={0x34, 0x1c, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_MAC={0xc, 0x1, @random="f7e9e2a4c5d2"}]}, 0x34}}, 0x0) 00:25:59 executing program 1: r0 = socket(0x11, 0x80a, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000f00)={0x14}, 0x14}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000046c0)={&(0x7f0000000000), 0xc, &(0x7f0000004680)={&(0x7f0000004280)={0x14}, 0x14}}, 0x0) 00:25:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:25:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:25:59 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000006c0)=0xfffffffffffffff8) [ 1561.068023] FAULT_FLAG_ALLOW_RETRY missing 30 [ 1561.068035] CPU: 1 PID: 855 Comm: syz-executor5 Not tainted 4.9.123-g8dd3fc2 #27 [ 1561.068041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:25:59 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210035004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) [ 1561.068081] ffff8801ac3d7610 ffffffff81eb9689 0000000000000002 0000000000000000 [ 1561.068094] ffff8801c1ad9c80 ffff8801ac3d77e0 0000000000000000 ffff8801ac3d7808 [ 1561.068107] ffffffff81cbfe4b 00000000000038a6 ffff8801a5a65130 ffff8801c1ad9d8c [ 1561.068109] Call Trace: [ 1561.068127] [] dump_stack+0xc1/0x128 [ 1561.068151] [] handle_userfault.cold.18+0x3e/0x51 [ 1561.068166] [] ? debug_check_no_locks_freed+0x210/0x210 [ 1561.068179] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 1561.068192] [] ? check_preemption_disabled+0x3b/0x170 [ 1561.068201] [] ? check_preemption_disabled+0x3b/0x170 [ 1561.068212] [] ? handle_mm_fault+0x12e6/0x2a00 [ 1561.068221] [] ? handle_mm_fault+0x221f/0x2a00 [ 1561.068229] [] handle_mm_fault+0x222d/0x2a00 [ 1561.068238] [] ? vm_insert_mixed+0x280/0x280 [ 1561.068247] [] ? __lock_is_held+0xa2/0xf0 [ 1561.068267] [] __do_page_fault+0x5af/0xd50 [ 1561.068278] [] ? mm_fault_error+0x2c0/0x2c0 [ 1561.068289] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1561.068299] [] do_page_fault+0x27/0x30 [ 1561.068308] [] page_fault+0x28/0x30 [ 1561.068319] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 1561.068331] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 1561.068340] [] ? str_to_user+0xa0/0xa0 [ 1561.068349] [] ? __lock_acquire+0x654/0x4070 [ 1561.068358] [] ? exit_robust_list+0x220/0x220 [ 1561.068367] [] evdev_ioctl+0x27/0x30 [ 1561.068376] [] ? evdev_ioctl_compat+0x30/0x30 [ 1561.068384] [] do_vfs_ioctl+0x1ac/0x11a0 [ 1561.068392] [] ? ioctl_preallocate+0x220/0x220 [ 1561.068400] [] ? selinux_capable+0x40/0x40 [ 1561.068408] [] ? __fget+0x20a/0x3b0 [ 1561.068415] [] ? __fget+0x231/0x3b0 [ 1561.068422] [] ? __fget+0x47/0x3b0 [ 1561.068432] [] ? security_file_ioctl+0x8f/0xc0 [ 1561.068439] [] SyS_ioctl+0x8f/0xc0 [ 1561.068447] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 1561.068454] [] do_syscall_64+0x1a6/0x490 [ 1561.068465] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1561.502062] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1561.509510] attempt to access beyond end of device [ 1561.514476] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1561.520621] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 1561.528102] attempt to access beyond end of device [ 1561.533048] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1561.539177] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 1561.546633] attempt to access beyond end of device [ 1561.551592] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1561.557718] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1561.565198] attempt to access beyond end of device [ 1561.570133] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1561.576289] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1561.583876] attempt to access beyond end of device [ 1561.588803] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1561.595019] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 1561.602475] attempt to access beyond end of device [ 1561.607382] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1561.613553] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 1561.621210] attempt to access beyond end of device [ 1561.626131] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1561.632276] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1561.639755] attempt to access beyond end of device [ 1561.644696] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1561.650857] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1561.658322] attempt to access beyond end of device [ 1561.663262] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1561.669402] attempt to access beyond end of device [ 1561.674347] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1561.680485] attempt to access beyond end of device [ 1561.685421] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1561.691680] attempt to access beyond end of device [ 1561.696590] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1561.702868] attempt to access beyond end of device [ 1561.707803] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1561.713952] attempt to access beyond end of device [ 1561.718872] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1561.725147] attempt to access beyond end of device [ 1561.730076] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1561.736274] attempt to access beyond end of device [ 1561.741234] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1561.747371] attempt to access beyond end of device [ 1561.752302] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1561.758447] attempt to access beyond end of device [ 1561.763383] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1561.769534] attempt to access beyond end of device [ 1561.774512] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1561.780674] attempt to access beyond end of device [ 1561.785834] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1561.792028] attempt to access beyond end of device [ 1561.796963] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1561.803258] attempt to access beyond end of device [ 1561.808190] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1561.814432] attempt to access beyond end of device [ 1561.819355] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1561.825567] attempt to access beyond end of device [ 1561.830488] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1561.836665] attempt to access beyond end of device [ 1561.841615] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1561.847752] attempt to access beyond end of device 00:26:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 00:26:00 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000007ead09443677a9ba00000000000000000020000002"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:26:00 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210035004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 00:26:00 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:26:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 00:26:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x0, 0x65a, 0x0, 0x0, 0x3cb, 0xf5, 0x100}, "", [[], [], [], [], [], []]}, 0x620) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) 00:26:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$packet(0x11, 0x808000000002, 0x300) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000140)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 1561.852701] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1561.858842] attempt to access beyond end of device [ 1561.864128] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1561.870297] attempt to access beyond end of device [ 1561.875271] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1561.887978] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 00:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:26:00 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210035004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 00:26:00 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000007ead09443677a9ba00000000000000000020000002"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 1561.916493] attempt to access beyond end of device [ 1561.932716] loop0: rw=0, want=18442984958116442990, limit=264192 00:26:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 00:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:26:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000300)=ANY=[]) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18}, 0x18) fchdir(0xffffffffffffffff) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') truncate(&(0x7f0000000b00)='./file0/file1\x00', 0x201f) [ 1561.958103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. 00:26:00 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000007ead09443677a9ba00000000000000000020000002"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 1561.999460] FAULT_FLAG_ALLOW_RETRY missing 30 00:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1561.999472] CPU: 0 PID: 902 Comm: syz-executor5 Not tainted 4.9.123-g8dd3fc2 #27 [ 1561.999483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.999499] ffff880187adf610 ffffffff81eb9689 0000000000000002 0000000000000000 [ 1561.999511] ffff8801c1ad8d80 ffff880187adf7e0 0000000000000000 ffff880187adf808 [ 1561.999522] ffffffff81cbfe4b ffff880187adf738 ffffffff812306aa ffff8801c1ad8e8c [ 1561.999524] Call Trace: [ 1561.999562] [] dump_stack+0xc1/0x128 [ 1561.999582] [] handle_userfault.cold.18+0x3e/0x51 [ 1561.999600] [] ? perf_trace_lock+0x11a/0x520 [ 1561.999618] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 1561.999632] [] ? check_preemption_disabled+0x3b/0x170 [ 1561.999646] [] ? handle_mm_fault+0x12e6/0x2a00 [ 1561.999657] [] ? handle_mm_fault+0x221f/0x2a00 [ 1561.999669] [] handle_mm_fault+0x222d/0x2a00 [ 1561.999679] [] ? vm_insert_mixed+0x280/0x280 [ 1561.999689] [] ? __lock_is_held+0xa2/0xf0 [ 1561.999701] [] __do_page_fault+0x5af/0xd50 [ 1561.999711] [] ? mm_fault_error+0x2c0/0x2c0 [ 1561.999721] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1561.999732] [] do_page_fault+0x27/0x30 [ 1561.999742] [] page_fault+0x28/0x30 [ 1561.999754] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 1561.999766] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 1561.999776] [] ? str_to_user+0xa0/0xa0 [ 1561.999787] [] ? __lock_acquire+0x654/0x4070 [ 1561.999800] [] ? exit_robust_list+0x220/0x220 [ 1561.999809] [] evdev_ioctl+0x27/0x30 [ 1561.999817] [] ? evdev_ioctl_compat+0x30/0x30 [ 1561.999828] [] do_vfs_ioctl+0x1ac/0x11a0 [ 1561.999836] [] ? ioctl_preallocate+0x220/0x220 [ 1561.999844] [] ? selinux_capable+0x40/0x40 [ 1561.999854] [] ? __fget+0x20a/0x3b0 [ 1561.999861] [] ? __fget+0x231/0x3b0 [ 1561.999870] [] ? __fget+0x47/0x3b0 [ 1561.999880] [] ? security_file_ioctl+0x8f/0xc0 [ 1561.999888] [] SyS_ioctl+0x8f/0xc0 [ 1561.999895] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 1561.999903] [] do_syscall_64+0x1a6/0x490 [ 1561.999911] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1562.017510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 1562.063624] BTRFS error (device loop3): superblock checksum mismatch [ 1562.093042] netlink: 20 bytes leftover after parsing attributes in process `syz-executor6'. [ 1562.107695] BTRFS error (device loop3): open_ctree failed [ 1562.426332] attempt to access beyond end of device [ 1562.431274] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1562.437411] attempt to access beyond end of device [ 1562.442347] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1562.448518] attempt to access beyond end of device [ 1562.453460] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1562.459622] attempt to access beyond end of device [ 1562.464729] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1562.470971] attempt to access beyond end of device [ 1562.475893] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1562.482049] attempt to access beyond end of device [ 1562.486978] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1562.493188] attempt to access beyond end of device [ 1562.498108] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1562.504330] attempt to access beyond end of device [ 1562.509288] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1562.515483] attempt to access beyond end of device [ 1562.520404] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1562.526576] attempt to access beyond end of device [ 1562.531516] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1562.537692] attempt to access beyond end of device [ 1562.542646] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1562.548802] attempt to access beyond end of device [ 1562.553759] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1562.559908] attempt to access beyond end of device [ 1562.564853] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1562.571117] attempt to access beyond end of device [ 1562.576027] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1562.582295] attempt to access beyond end of device [ 1562.587230] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1562.593411] attempt to access beyond end of device [ 1562.598349] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1562.604524] attempt to access beyond end of device [ 1562.609460] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1562.615627] attempt to access beyond end of device [ 1562.620562] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1562.626796] attempt to access beyond end of device [ 1562.631758] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1562.637900] attempt to access beyond end of device [ 1562.642840] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1562.648982] attempt to access beyond end of device [ 1562.653931] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1562.660091] attempt to access beyond end of device [ 1562.665276] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1562.671554] attempt to access beyond end of device [ 1562.676475] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1562.682941] attempt to access beyond end of device [ 1562.687933] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1562.694308] attempt to access beyond end of device [ 1562.699244] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1562.705553] attempt to access beyond end of device [ 1562.710531] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1562.716821] attempt to access beyond end of device [ 1562.721766] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1562.727903] attempt to access beyond end of device [ 1562.732939] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1562.739088] attempt to access beyond end of device [ 1562.744329] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1562.750465] attempt to access beyond end of device [ 1562.755411] loop0: rw=0, want=18442984958116443042, limit=264192 00:26:01 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/79) 00:26:01 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040)=0x64e8, 0x4) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 00:26:01 executing program 1: r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000007ead09443677a9ba00000000000000000020000002"], 0x2e) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:26:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 00:26:01 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000100)) 00:26:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) 00:26:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000380)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x0, 0x65a, 0x0, 0x0, 0x3cb, 0xf5, 0x100}, "", [[], [], [], [], [], []]}, 0x620) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000001c0)) 00:26:01 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) [ 1562.761613] attempt to access beyond end of device [ 1562.766564] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1562.772742] attempt to access beyond end of device [ 1562.777680] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1562.783848] attempt to access beyond end of device [ 1562.796975] loop0: rw=0, want=18442984958116443040, limit=264192 00:26:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 00:26:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x8) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28}, 0x28) 00:26:01 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) 00:26:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0x6, [], [@generic={0x7, 0x25, "bbbb3fff06862252359bba54f69eea117bd840bb33e1f6f57a68607feb46c97f65c0fa1213"}, @calipso={0x7, 0x8}]}, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0) [ 1562.810150] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1562.822100] SELinux: failure in selinux_parse_skb(), unable to parse packet 00:26:01 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000100)) 00:26:01 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) [ 1562.899715] attempt to access beyond end of device 00:26:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 00:26:01 executing program 5: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9) [ 1562.930322] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1562.976188] attempt to access beyond end of device [ 1562.987098] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1563.011156] attempt to access beyond end of device [ 1563.017682] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1563.027591] attempt to access beyond end of device [ 1563.032188] BTRFS error (device loop3): superblock checksum mismatch [ 1563.039455] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1563.047396] attempt to access beyond end of device [ 1563.058185] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1563.071302] attempt to access beyond end of device [ 1563.082595] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.091156] BTRFS error (device loop3): open_ctree failed [ 1563.109883] attempt to access beyond end of device [ 1563.116361] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.122752] attempt to access beyond end of device [ 1563.127730] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.145830] attempt to access beyond end of device [ 1563.169479] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.180930] attempt to access beyond end of device [ 1563.201057] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.207302] attempt to access beyond end of device [ 1563.212323] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.218557] attempt to access beyond end of device [ 1563.223824] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.230056] attempt to access beyond end of device [ 1563.235265] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.241669] attempt to access beyond end of device [ 1563.246882] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.253198] attempt to access beyond end of device [ 1563.258197] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.264444] attempt to access beyond end of device [ 1563.269436] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.275692] attempt to access beyond end of device [ 1563.280697] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.287012] attempt to access beyond end of device [ 1563.292038] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.298268] attempt to access beyond end of device [ 1563.303532] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.309782] attempt to access beyond end of device [ 1563.314836] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.321148] attempt to access beyond end of device [ 1563.326156] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.332423] attempt to access beyond end of device [ 1563.337438] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.343840] attempt to access beyond end of device [ 1563.348847] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.355109] attempt to access beyond end of device [ 1563.360131] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.366461] attempt to access beyond end of device [ 1563.371483] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.377737] attempt to access beyond end of device [ 1563.382753] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.388973] attempt to access beyond end of device [ 1563.394000] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.400215] attempt to access beyond end of device [ 1563.405235] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.411482] attempt to access beyond end of device [ 1563.416494] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.422746] attempt to access beyond end of device [ 1563.427744] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1563.434004] attempt to access beyond end of device [ 1563.439000] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1563.445262] attempt to access beyond end of device [ 1563.450278] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1563.456678] attempt to access beyond end of device [ 1563.461698] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1563.467937] attempt to access beyond end of device [ 1563.473019] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1563.479301] attempt to access beyond end of device [ 1563.484327] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1563.490581] attempt to access beyond end of device [ 1563.495615] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1563.501852] attempt to access beyond end of device [ 1563.506867] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1563.513139] attempt to access beyond end of device [ 1563.518148] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1563.524385] attempt to access beyond end of device [ 1563.529379] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1563.535638] attempt to access beyond end of device [ 1563.540675] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1563.547232] attempt to access beyond end of device [ 1563.552254] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1563.558505] attempt to access beyond end of device [ 1563.563698] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1563.569926] attempt to access beyond end of device [ 1563.574941] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1563.581255] attempt to access beyond end of device [ 1563.586250] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1563.592516] attempt to access beyond end of device [ 1563.597556] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1563.603831] attempt to access beyond end of device [ 1563.610695] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1563.616922] attempt to access beyond end of device [ 1563.622216] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1563.628415] attempt to access beyond end of device [ 1563.633406] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1563.639623] attempt to access beyond end of device [ 1563.644640] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1563.650884] attempt to access beyond end of device [ 1563.656213] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1563.662530] attempt to access beyond end of device [ 1563.667520] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1563.673911] attempt to access beyond end of device [ 1563.678903] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1563.685130] attempt to access beyond end of device [ 1563.690108] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1563.696417] attempt to access beyond end of device [ 1563.701440] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.707665] attempt to access beyond end of device [ 1563.712687] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.718891] attempt to access beyond end of device [ 1563.723886] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.730093] attempt to access beyond end of device [ 1563.735100] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.741336] attempt to access beyond end of device [ 1563.746308] loop0: rw=0, want=18442984958116443100, limit=264192 [ 1563.752519] attempt to access beyond end of device [ 1563.757504] loop0: rw=0, want=18442984958116443102, limit=264192 [ 1563.763743] attempt to access beyond end of device [ 1563.768723] loop0: rw=0, want=18442984958116443104, limit=264192 [ 1563.774938] attempt to access beyond end of device [ 1563.779915] loop0: rw=0, want=18442984958116443106, limit=264192 [ 1563.786440] attempt to access beyond end of device [ 1563.791464] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.797744] attempt to access beyond end of device [ 1563.802828] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.809036] attempt to access beyond end of device [ 1563.814035] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.820246] attempt to access beyond end of device [ 1563.825240] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.831486] attempt to access beyond end of device [ 1563.836459] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.842674] attempt to access beyond end of device [ 1563.847655] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.853875] attempt to access beyond end of device [ 1563.858863] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.865333] attempt to access beyond end of device [ 1563.870313] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.876568] attempt to access beyond end of device [ 1563.881580] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.887794] attempt to access beyond end of device [ 1563.892983] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.899222] attempt to access beyond end of device [ 1563.904235] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.910462] attempt to access beyond end of device [ 1563.915516] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.921934] attempt to access beyond end of device [ 1563.926911] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.933146] attempt to access beyond end of device [ 1563.938128] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.945663] attempt to access beyond end of device [ 1563.950639] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1563.956871] attempt to access beyond end of device [ 1563.961865] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1563.968131] attempt to access beyond end of device [ 1563.973134] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1563.979334] attempt to access beyond end of device [ 1563.984324] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1563.990523] attempt to access beyond end of device [ 1563.995549] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1564.001900] attempt to access beyond end of device [ 1564.006870] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1564.013103] attempt to access beyond end of device [ 1564.018087] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1564.024354] attempt to access beyond end of device [ 1564.029458] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1564.035672] attempt to access beyond end of device [ 1564.040644] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1564.046870] attempt to access beyond end of device [ 1564.051875] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1564.058114] attempt to access beyond end of device [ 1564.063114] loop0: rw=0, want=18442984958116442996, limit=264192 [ 1564.069313] attempt to access beyond end of device [ 1564.074310] loop0: rw=0, want=18442984958116442998, limit=264192 [ 1564.080607] attempt to access beyond end of device [ 1564.085607] loop0: rw=0, want=18442984958116443000, limit=264192 [ 1564.091851] attempt to access beyond end of device [ 1564.096837] loop0: rw=0, want=18442984958116443002, limit=264192 [ 1564.103320] attempt to access beyond end of device [ 1564.108302] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1564.114711] attempt to access beyond end of device [ 1564.119687] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1564.125895] attempt to access beyond end of device [ 1564.130946] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1564.137138] attempt to access beyond end of device [ 1564.142140] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1564.148359] attempt to access beyond end of device [ 1564.153358] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1564.159574] attempt to access beyond end of device [ 1564.164580] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1564.170792] attempt to access beyond end of device [ 1564.175766] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1564.182174] attempt to access beyond end of device [ 1564.187146] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1564.193379] attempt to access beyond end of device [ 1564.198354] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1564.204588] attempt to access beyond end of device [ 1564.209575] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1564.215782] attempt to access beyond end of device [ 1564.220749] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1564.227100] attempt to access beyond end of device [ 1564.232104] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1564.238429] attempt to access beyond end of device [ 1564.243517] loop0: rw=0, want=18442984958116442996, limit=264192 [ 1564.249732] attempt to access beyond end of device [ 1564.254725] loop0: rw=0, want=18442984958116442998, limit=264192 [ 1564.260998] attempt to access beyond end of device [ 1564.265972] loop0: rw=0, want=18442984958116443000, limit=264192 [ 1564.272178] attempt to access beyond end of device [ 1564.277169] loop0: rw=0, want=18442984958116443002, limit=264192 [ 1564.283392] attempt to access beyond end of device [ 1564.288412] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1564.294664] attempt to access beyond end of device [ 1564.299638] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1564.305850] attempt to access beyond end of device [ 1564.310842] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1564.317033] attempt to access beyond end of device [ 1564.322038] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1564.328291] attempt to access beyond end of device [ 1564.333423] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.339677] attempt to access beyond end of device [ 1564.344682] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.351194] attempt to access beyond end of device [ 1564.356165] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.362382] attempt to access beyond end of device [ 1564.367354] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.373596] attempt to access beyond end of device [ 1564.378588] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.384798] attempt to access beyond end of device [ 1564.389773] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.395986] attempt to access beyond end of device [ 1564.400979] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.407179] attempt to access beyond end of device [ 1564.412170] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.418383] attempt to access beyond end of device [ 1564.423378] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.429609] attempt to access beyond end of device [ 1564.434645] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.440995] attempt to access beyond end of device [ 1564.445973] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.452189] attempt to access beyond end of device [ 1564.457173] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.463471] attempt to access beyond end of device [ 1564.468446] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.474653] attempt to access beyond end of device [ 1564.479646] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.485877] attempt to access beyond end of device [ 1564.490888] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.497088] attempt to access beyond end of device [ 1564.502078] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.508288] attempt to access beyond end of device [ 1564.513278] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.519477] attempt to access beyond end of device [ 1564.524504] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.530714] attempt to access beyond end of device [ 1564.535705] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.541922] attempt to access beyond end of device [ 1564.546890] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.553251] attempt to access beyond end of device [ 1564.558240] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.564476] attempt to access beyond end of device [ 1564.569457] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.575741] attempt to access beyond end of device [ 1564.580718] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.587503] attempt to access beyond end of device [ 1564.592517] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.598782] attempt to access beyond end of device [ 1564.603784] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.609977] attempt to access beyond end of device [ 1564.615005] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.621225] attempt to access beyond end of device [ 1564.626196] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.632400] attempt to access beyond end of device [ 1564.637369] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.643643] attempt to access beyond end of device [ 1564.648615] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.654852] attempt to access beyond end of device [ 1564.659817] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.666164] attempt to access beyond end of device [ 1564.671155] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.677351] attempt to access beyond end of device [ 1564.682393] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.688609] attempt to access beyond end of device [ 1564.693602] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.699798] attempt to access beyond end of device [ 1564.704812] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.711013] attempt to access beyond end of device [ 1564.715987] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.722194] attempt to access beyond end of device [ 1564.727170] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.733390] attempt to access beyond end of device [ 1564.738366] loop0: rw=0, want=18442984958116443044, limit=264192 [ 1564.744619] attempt to access beyond end of device [ 1564.749595] loop0: rw=0, want=18442984958116443046, limit=264192 [ 1564.755793] attempt to access beyond end of device [ 1564.760804] loop0: rw=0, want=18442984958116443048, limit=264192 [ 1564.767012] attempt to access beyond end of device [ 1564.772110] loop0: rw=0, want=18442984958116443050, limit=264192 [ 1564.778357] attempt to access beyond end of device [ 1564.783372] loop0: rw=0, want=18442984958116443236, limit=264192 [ 1564.789578] attempt to access beyond end of device [ 1564.794642] loop0: rw=0, want=18442984958116443238, limit=264192 [ 1564.800874] attempt to access beyond end of device [ 1564.805845] loop0: rw=0, want=18442984958116443240, limit=264192 [ 1564.812053] attempt to access beyond end of device [ 1564.817021] loop0: rw=0, want=18442984958116443242, limit=264192 [ 1564.823298] attempt to access beyond end of device [ 1564.828266] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1564.834502] attempt to access beyond end of device [ 1564.839547] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1564.845881] attempt to access beyond end of device [ 1564.850866] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1564.857053] attempt to access beyond end of device [ 1564.862084] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1564.868286] attempt to access beyond end of device [ 1564.873302] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1564.879498] attempt to access beyond end of device [ 1564.884624] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1564.890829] attempt to access beyond end of device [ 1564.895802] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1564.902077] attempt to access beyond end of device [ 1564.907045] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1564.913293] attempt to access beyond end of device [ 1564.918268] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1564.924479] attempt to access beyond end of device [ 1564.929474] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1564.936774] attempt to access beyond end of device [ 1564.942210] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1564.956933] attempt to access beyond end of device [ 1564.961979] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1564.968432] attempt to access beyond end of device [ 1564.973466] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1564.979711] attempt to access beyond end of device [ 1564.984702] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1564.991096] attempt to access beyond end of device [ 1564.996079] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.002304] attempt to access beyond end of device [ 1565.007277] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.013576] attempt to access beyond end of device [ 1565.018556] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.024771] attempt to access beyond end of device [ 1565.029749] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.035949] attempt to access beyond end of device [ 1565.040940] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.047131] attempt to access beyond end of device [ 1565.052236] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.058438] attempt to access beyond end of device [ 1565.063678] loop0: rw=0, want=18442984958116442996, limit=264192 [ 1565.069891] attempt to access beyond end of device [ 1565.075407] loop0: rw=0, want=18442984958116442998, limit=264192 [ 1565.081625] attempt to access beyond end of device [ 1565.086609] loop0: rw=0, want=18442984958116443000, limit=264192 [ 1565.092832] attempt to access beyond end of device [ 1565.097809] loop0: rw=0, want=18442984958116443002, limit=264192 [ 1565.104203] attempt to access beyond end of device [ 1565.109181] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.115392] attempt to access beyond end of device [ 1565.120358] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.126647] attempt to access beyond end of device [ 1565.131646] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.137839] attempt to access beyond end of device [ 1565.142836] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.149086] attempt to access beyond end of device [ 1565.154084] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.160272] attempt to access beyond end of device [ 1565.165256] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.171458] attempt to access beyond end of device [ 1565.176440] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.182644] attempt to access beyond end of device [ 1565.187616] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.193840] attempt to access beyond end of device [ 1565.198837] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.205076] attempt to access beyond end of device [ 1565.211318] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.217965] attempt to access beyond end of device [ 1565.223507] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.229733] attempt to access beyond end of device [ 1565.234785] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.241117] attempt to access beyond end of device [ 1565.246162] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.252381] attempt to access beyond end of device [ 1565.257405] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.263625] attempt to access beyond end of device [ 1565.268618] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.274830] attempt to access beyond end of device [ 1565.279802] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.286021] attempt to access beyond end of device [ 1565.291023] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.297240] attempt to access beyond end of device [ 1565.302524] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.308846] attempt to access beyond end of device [ 1565.313842] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.320114] attempt to access beyond end of device [ 1565.325248] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.331657] attempt to access beyond end of device [ 1565.336639] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.342907] attempt to access beyond end of device [ 1565.347939] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.354186] attempt to access beyond end of device [ 1565.359160] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.365368] attempt to access beyond end of device [ 1565.370353] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.376588] attempt to access beyond end of device [ 1565.381607] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.387813] attempt to access beyond end of device [ 1565.392818] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.399015] attempt to access beyond end of device [ 1565.404007] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.410203] attempt to access beyond end of device [ 1565.415212] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.421450] attempt to access beyond end of device [ 1565.426421] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.432767] attempt to access beyond end of device [ 1565.437765] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.443970] attempt to access beyond end of device [ 1565.448942] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.455194] attempt to access beyond end of device [ 1565.460167] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.466399] attempt to access beyond end of device [ 1565.471386] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.477679] attempt to access beyond end of device [ 1565.482690] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.488879] attempt to access beyond end of device [ 1565.493866] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.500095] attempt to access beyond end of device [ 1565.505082] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.511315] attempt to access beyond end of device [ 1565.516307] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.522526] attempt to access beyond end of device [ 1565.527508] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.533717] attempt to access beyond end of device [ 1565.538686] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.545050] attempt to access beyond end of device [ 1565.550058] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.556302] attempt to access beyond end of device [ 1565.561617] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.567844] attempt to access beyond end of device [ 1565.572859] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.579056] attempt to access beyond end of device [ 1565.584055] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.590293] attempt to access beyond end of device [ 1565.595375] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.601620] attempt to access beyond end of device [ 1565.606612] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.612829] attempt to access beyond end of device [ 1565.617802] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.624027] attempt to access beyond end of device [ 1565.629069] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.635274] attempt to access beyond end of device [ 1565.640242] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.646452] attempt to access beyond end of device [ 1565.651557] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1565.657759] attempt to access beyond end of device [ 1565.662989] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1565.669216] attempt to access beyond end of device [ 1565.674290] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1565.680472] attempt to access beyond end of device [ 1565.685448] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1565.691690] attempt to access beyond end of device [ 1565.696659] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1565.702862] attempt to access beyond end of device [ 1565.707840] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1565.714053] attempt to access beyond end of device [ 1565.719028] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1565.725231] attempt to access beyond end of device [ 1565.730194] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1565.736417] attempt to access beyond end of device [ 1565.741395] loop0: rw=0, want=18442984958116442996, limit=264192 [ 1565.747586] attempt to access beyond end of device [ 1565.752597] loop0: rw=0, want=18442984958116442998, limit=264192 [ 1565.758785] attempt to access beyond end of device [ 1565.763878] loop0: rw=0, want=18442984958116443000, limit=264192 [ 1565.770102] attempt to access beyond end of device [ 1565.775118] loop0: rw=0, want=18442984958116443002, limit=264192 [ 1565.781433] attempt to access beyond end of device [ 1565.786417] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.792669] attempt to access beyond end of device [ 1565.797668] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.803950] attempt to access beyond end of device [ 1565.808922] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.815134] attempt to access beyond end of device [ 1565.820101] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.826321] attempt to access beyond end of device [ 1565.831300] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.837500] attempt to access beyond end of device [ 1565.842503] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.848694] attempt to access beyond end of device [ 1565.853675] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.859859] attempt to access beyond end of device [ 1565.865115] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1565.871465] attempt to access beyond end of device [ 1565.876439] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1565.882637] attempt to access beyond end of device [ 1565.887609] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1565.893876] attempt to access beyond end of device [ 1565.898859] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1565.905100] attempt to access beyond end of device [ 1565.910072] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1565.916286] attempt to access beyond end of device [ 1565.921310] loop0: rw=0, want=18442984958116442996, limit=264192 [ 1565.927499] attempt to access beyond end of device [ 1565.932487] loop0: rw=0, want=18442984958116442998, limit=264192 [ 1565.938674] attempt to access beyond end of device [ 1565.943677] loop0: rw=0, want=18442984958116443000, limit=264192 [ 1565.949869] attempt to access beyond end of device [ 1565.954898] loop0: rw=0, want=18442984958116443002, limit=264192 [ 1565.961131] attempt to access beyond end of device [ 1565.966103] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1565.972299] attempt to access beyond end of device [ 1565.977283] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1565.983659] attempt to access beyond end of device [ 1565.988632] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1565.994830] attempt to access beyond end of device [ 1565.999797] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.006123] attempt to access beyond end of device [ 1566.011138] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.017325] attempt to access beyond end of device [ 1566.022331] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.028526] attempt to access beyond end of device [ 1566.033560] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.039749] buffer_io_error: 313 callbacks suppressed [ 1566.039756] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 1566.052521] attempt to access beyond end of device [ 1566.057503] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.063730] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1566.071257] attempt to access beyond end of device [ 1566.076221] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.082428] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1566.089911] attempt to access beyond end of device [ 1566.095055] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.101296] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 1566.108799] attempt to access beyond end of device [ 1566.113847] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.120038] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 1566.127556] attempt to access beyond end of device [ 1566.132612] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.138804] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1566.146333] attempt to access beyond end of device [ 1566.151326] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.157507] Buffer I/O error on dev loop0p105, logical block 0, async page read [ 1566.165285] attempt to access beyond end of device [ 1566.170257] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.176458] Buffer I/O error on dev loop0p105, logical block 1, async page read [ 1566.184297] attempt to access beyond end of device [ 1566.189278] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.195476] Buffer I/O error on dev loop0p105, logical block 2, async page read [ 1566.203146] attempt to access beyond end of device [ 1566.208125] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.214341] Buffer I/O error on dev loop0p105, logical block 3, async page read [ 1566.221918] attempt to access beyond end of device [ 1566.226886] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.233096] attempt to access beyond end of device [ 1566.238158] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.244389] attempt to access beyond end of device [ 1566.249366] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.255592] attempt to access beyond end of device [ 1566.260571] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.266953] attempt to access beyond end of device [ 1566.271948] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.278150] attempt to access beyond end of device [ 1566.283143] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.289342] attempt to access beyond end of device [ 1566.294341] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.300527] attempt to access beyond end of device [ 1566.305522] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.311868] attempt to access beyond end of device [ 1566.316831] loop0: rw=0, want=18442984958116442988, limit=264192 [ 1566.323042] attempt to access beyond end of device [ 1566.328016] loop0: rw=0, want=18442984958116442990, limit=264192 [ 1566.334269] attempt to access beyond end of device [ 1566.339242] loop0: rw=0, want=18442984958116442992, limit=264192 [ 1566.345657] attempt to access beyond end of device [ 1566.350641] loop0: rw=0, want=18442984958116442994, limit=264192 [ 1566.356861] attempt to access beyond end of device [ 1566.361847] loop0: rw=0, want=18442984958116443108, limit=264192 [ 1566.368030] attempt to access beyond end of device [ 1566.373077] loop0: rw=0, want=18442984958116443110, limit=264192 [ 1566.379228] attempt to access beyond end of device [ 1566.384172] loop0: rw=0, want=18442984958116443112, limit=264192 [ 1566.390322] attempt to access beyond end of device [ 1566.395291] loop0: rw=0, want=18442984958116443114, limit=264192 [ 1566.401488] attempt to access beyond end of device [ 1566.406413] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.412598] attempt to access beyond end of device [ 1566.417520] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.423816] attempt to access beyond end of device [ 1566.428740] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.434914] attempt to access beyond end of device [ 1566.439843] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.446089] attempt to access beyond end of device [ 1566.451041] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.457195] attempt to access beyond end of device [ 1566.462148] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.468302] attempt to access beyond end of device [ 1566.473253] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.479397] attempt to access beyond end of device [ 1566.484667] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.491104] attempt to access beyond end of device [ 1566.496028] loop0: rw=0, want=18442984958116447076, limit=264192 [ 1566.502496] attempt to access beyond end of device [ 1566.507432] loop0: rw=0, want=18442984958116447078, limit=264192 [ 1566.513877] attempt to access beyond end of device [ 1566.518802] loop0: rw=0, want=18442984958116447080, limit=264192 [ 1566.525238] attempt to access beyond end of device [ 1566.530160] loop0: rw=0, want=18442984958116447082, limit=264192 [ 1566.536717] attempt to access beyond end of device [ 1566.541904] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.548059] attempt to access beyond end of device [ 1566.553310] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.559469] attempt to access beyond end of device [ 1566.564705] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.571121] attempt to access beyond end of device [ 1566.576046] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.582464] attempt to access beyond end of device [ 1566.587389] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.593860] attempt to access beyond end of device [ 1566.598793] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.605194] attempt to access beyond end of device [ 1566.610117] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.616507] attempt to access beyond end of device [ 1566.621718] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.627889] attempt to access beyond end of device [ 1566.633087] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.639231] attempt to access beyond end of device [ 1566.644555] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.650726] attempt to access beyond end of device [ 1566.655911] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.662681] attempt to access beyond end of device [ 1566.667613] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.674073] attempt to access beyond end of device [ 1566.678996] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.685372] attempt to access beyond end of device [ 1566.690299] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.696689] attempt to access beyond end of device [ 1566.701893] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.708043] attempt to access beyond end of device [ 1566.713226] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.719385] attempt to access beyond end of device [ 1566.724598] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.730747] attempt to access beyond end of device [ 1566.735971] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.742410] attempt to access beyond end of device [ 1566.747360] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.753884] attempt to access beyond end of device [ 1566.758811] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.765294] attempt to access beyond end of device [ 1566.770234] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.776843] attempt to access beyond end of device [ 1566.782207] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.788356] attempt to access beyond end of device [ 1566.793567] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.799758] attempt to access beyond end of device [ 1566.805013] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.811438] attempt to access beyond end of device [ 1566.816361] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.822820] attempt to access beyond end of device [ 1566.827763] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.834235] attempt to access beyond end of device [ 1566.839158] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.845595] attempt to access beyond end of device [ 1566.850518] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.856959] attempt to access beyond end of device [ 1566.862297] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.868445] attempt to access beyond end of device [ 1566.873656] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.879802] attempt to access beyond end of device [ 1566.885033] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.891475] attempt to access beyond end of device [ 1566.896407] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.902892] attempt to access beyond end of device [ 1566.907835] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.914311] attempt to access beyond end of device [ 1566.919239] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.925857] attempt to access beyond end of device [ 1566.931079] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.937232] attempt to access beyond end of device [ 1566.942427] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.948620] attempt to access beyond end of device [ 1566.953897] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1566.960048] attempt to access beyond end of device [ 1566.965252] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1566.972190] attempt to access beyond end of device [ 1566.977117] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1566.983795] attempt to access beyond end of device [ 1566.988734] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1566.995283] attempt to access beyond end of device [ 1567.000213] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.006726] attempt to access beyond end of device [ 1567.011901] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.018048] attempt to access beyond end of device [ 1567.023313] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.029465] attempt to access beyond end of device [ 1567.034665] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.041119] attempt to access beyond end of device [ 1567.046043] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.052473] attempt to access beyond end of device [ 1567.057417] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.064095] attempt to access beyond end of device [ 1567.069024] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.075974] attempt to access beyond end of device [ 1567.081330] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.087753] attempt to access beyond end of device [ 1567.092951] loop0: rw=0, want=18442984958116443004, limit=264192 [ 1567.099101] attempt to access beyond end of device [ 1567.104337] loop0: rw=0, want=18442984958116443006, limit=264192 [ 1567.110484] attempt to access beyond end of device [ 1567.115677] loop0: rw=0, want=18442984958116443008, limit=264192 [ 1567.122194] attempt to access beyond end of device [ 1567.127129] loop0: rw=0, want=18442984958116443010, limit=264192 [ 1567.133623] attempt to access beyond end of device [ 1567.138560] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.144998] attempt to access beyond end of device [ 1567.149929] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.156399] attempt to access beyond end of device [ 1567.161603] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.167755] attempt to access beyond end of device [ 1567.173019] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.179209] attempt to access beyond end of device [ 1567.184416] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.190574] attempt to access beyond end of device [ 1567.195930] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.202354] attempt to access beyond end of device [ 1567.207280] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.213772] attempt to access beyond end of device [ 1567.218705] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.225148] attempt to access beyond end of device [ 1567.230083] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.236631] attempt to access beyond end of device [ 1567.241825] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.247999] attempt to access beyond end of device [ 1567.253280] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.259446] attempt to access beyond end of device [ 1567.264725] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.271193] attempt to access beyond end of device [ 1567.276128] loop0: rw=0, want=18442984958116443036, limit=264192 [ 1567.282526] attempt to access beyond end of device [ 1567.287466] loop0: rw=0, want=18442984958116443038, limit=264192 [ 1567.293909] attempt to access beyond end of device [ 1567.298835] loop0: rw=0, want=18442984958116443040, limit=264192 [ 1567.306009] attempt to access beyond end of device [ 1567.311215] loop0: rw=0, want=18442984958116443042, limit=264192 [ 1567.317386] attempt to access beyond end of device [ 1567.322646] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.328792] attempt to access beyond end of device [ 1567.334003] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.340174] attempt to access beyond end of device [ 1567.345342] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.351829] attempt to access beyond end of device [ 1567.356764] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1567.363237] attempt to access beyond end of device [ 1567.368174] loop0: rw=0, want=18442984958116442980, limit=264192 [ 1567.374602] attempt to access beyond end of device [ 1567.379545] loop0: rw=0, want=18442984958116442982, limit=264192 [ 1567.386343] attempt to access beyond end of device [ 1567.391550] loop0: rw=0, want=18442984958116442984, limit=264192 [ 1567.397705] attempt to access beyond end of device [ 1567.402906] loop0: rw=0, want=18442984958116442986, limit=264192 [ 1719.460931] INFO: task syz-executor0:25928 blocked for more than 140 seconds. [ 1719.468251] Not tainted 4.9.123-g8dd3fc2 #27 [ 1719.473695] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1719.481925] syz-executor0 D27864 25928 1 0x00000004 [ 1719.487690] ffff880191b5b000 ffff8801b2624540 ffff8801ccd0a4c0 ffff8801c442b000 [ 1719.496055] ffff8801db321c18 ffff8801ba4af4c8 ffffffff839f0dbd ffff880191b5b8c8 [ 1719.504396] ffffed003236b718 ffff880191b5b000 00fffc0000000000 ffff8801db3224e8 [ 1719.513405] Call Trace: [ 1719.516002] [] ? __schedule+0x64d/0x1bd0 [ 1719.521983] [] schedule+0x7f/0x1b0 [ 1719.527174] [] schedule_preempt_disabled+0x13/0x20 [ 1719.534019] [] mutex_lock_nested+0x326/0x870 [ 1719.540093] [] ? vfat_lookup+0xd1/0x530 [ 1719.546014] [] ? mutex_trylock+0x3e0/0x3e0 [ 1719.552364] [] ? __d_lookup_rcu+0x730/0x730 [ 1719.558347] [] vfat_lookup+0xd1/0x530 [ 1719.564066] [] ? vfat_unlink+0x2d0/0x2d0 [ 1719.569787] [] ? lookup_slow+0x141/0x470 [ 1719.575874] [] lookup_slow+0x23e/0x470 [ 1719.581732] [] ? page_put_link+0xd0/0xd0 [ 1719.587475] [] ? kmem_cache_alloc+0xbe/0x290 [ 1719.593820] [] ? get_empty_filp+0x8f/0x380 [ 1719.599715] [] ? path_openat+0xc1/0x3590 [ 1719.605707] [] ? do_filp_open+0x197/0x270 [ 1719.611766] [] ? do_sys_open+0x30d/0x5c0 [ 1719.617493] [] ? SyS_open+0x2d/0x40 [ 1719.623031] [] walk_component+0x716/0x1bb0 [ 1719.628942] [] ? selinux_inode_permission+0x248/0x4b0 [ 1719.636023] [] ? path_init+0x1580/0x1580 [ 1719.642636] [] ? security_inode_permission+0xc5/0x100 [ 1719.649496] [] ? __inode_permission2+0x9b/0x2d0 [ 1719.656063] [] ? set_root+0x2ed/0x440 [ 1719.662002] [] ? vfat_hashi+0x11a/0x380 [ 1719.667625] [] link_path_walk+0x889/0x1200 [ 1719.673754] [] ? walk_component+0x1bb0/0x1bb0 [ 1719.679911] [] ? __mutex_init+0xca/0x100 [ 1719.685879] [] path_openat+0x1ad/0x3590 [ 1719.691777] [] ? save_stack+0xa9/0xd0 [ 1719.697248] [] ? getname+0x19/0x20 [ 1719.702711] [] ? do_sys_open+0x20b/0x5c0 [ 1719.708426] [] ? SyS_open+0x2d/0x40 [ 1719.713960] [] ? do_syscall_64+0x1a6/0x490 [ 1719.719845] [] ? path_lookupat.isra.41+0x410/0x410 [ 1719.726775] [] ? __lock_is_held+0xa2/0xf0 [ 1719.732837] [] do_filp_open+0x197/0x270 [ 1719.738467] [] ? may_open_dev+0xe0/0xe0 [ 1719.744331] [] ? _raw_spin_unlock+0x2c/0x50 [ 1719.750297] [] ? __alloc_fd+0x1d7/0x4a0 [ 1719.756176] [] do_sys_open+0x30d/0x5c0 [ 1719.761978] [] ? filp_open+0x70/0x70 [ 1719.767341] [] SyS_open+0x2d/0x40 [ 1719.773658] [] ? do_sys_open+0x5c0/0x5c0 [ 1719.779384] [] do_syscall_64+0x1a6/0x490 [ 1719.785371] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1719.792583] [ 1719.792583] Showing all locks held in the system: [ 1719.798917] 2 locks held by khungtaskd/519: [ 1719.803242] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 1719.812024] #1: (tasklist_lock){.+.?..}, at: [] debug_show_all_locks+0x79/0x218 [ 1719.821764] 2 locks held by getty/3660: [ 1719.825725] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 1719.835113] #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 [ 1719.845145] 2 locks held by syz-executor0/25928: [ 1719.849888] #0: (&sb->s_type->i_mutex_key#22){++++++}, at: [] lookup_slow+0x141/0x470 [ 1719.860271] #1: (&sbi->s_lock){+.+.+.}, at: [] vfat_lookup+0xd1/0x530 [ 1719.869147] 1 lock held by syz-executor0/956: [ 1719.873647] #0: (&sb->s_type->i_mutex_key#22){++++++}, at: [] lookup_slow+0x141/0x470 [ 1719.884128] [ 1719.885755] ============================================= [ 1719.885755] [ 1719.893641] NMI backtrace for cpu 0 [ 1719.897282] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.123-g8dd3fc2 #27 [ 1719.904544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1719.913887] ffff8801d842fd08 ffffffff81eb9689 0000000000000000 0000000000000000 [ 1719.921933] 0000000000000000 0000000000000001 ffffffff810b9fa0 ffff8801d842fd40 [ 1719.929999] ffffffff81ec49c7 0000000000000000 0000000000000000 0000000000000003 [ 1719.938049] Call Trace: [ 1719.940633] [] dump_stack+0xc1/0x128 [ 1719.945987] [] ? irq_force_complete_move+0x320/0x320 [ 1719.952729] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 1719.959207] [] ? irq_force_complete_move+0x320/0x320 [ 1719.965947] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 1719.973035] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1719.980037] [] watchdog+0x6b4/0xa20 [ 1719.985313] [] ? watchdog+0x11c/0xa20 [ 1719.990752] [] kthread+0x26d/0x300 [ 1719.995939] [] ? reset_hung_task_detector+0x20/0x20 [ 1720.002597] [] ? kthread_park+0xa0/0xa0 [ 1720.008212] [] ? __switch_to_asm+0x34/0x70 [ 1720.014085] [] ? kthread_park+0xa0/0xa0 [ 1720.019696] [] ? kthread_park+0xa0/0xa0 [ 1720.025311] [] ret_from_fork+0x5c/0x70 [ 1720.031017] Sending NMI from CPU 0 to CPUs 1: [ 1720.036123] NMI backtrace for cpu 1 [ 1720.039750] CPU: 1 PID: 945 Comm: syz-executor0 Not tainted 4.9.123-g8dd3fc2 #27 [ 1720.047277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.056627] task: ffff8801a01e3000 task.stack: ffff8801cf8e8000 [ 1720.062680] RIP: 0010:[] c [] __sanitizer_cov_trace_pc+0x4b/0x50 [ 1720.072016] RSP: 0018:ffff8801cf8eef28 EFLAGS: 00000246 [ 1720.077457] RAX: 0000000000040000 RBX: ffff8801d618df88 RCX: ffffc9000011f000 [ 1720.084728] RDX: 0000000000040000 RSI: ffffffff8143b1ca RDI: ffffffff84434408 [ 1720.092009] RBP: ffff8801cf8eef28 R08: ffff8801a01e3938 R09: 0000000000000001 [ 1720.099262] R10: ffff8801a01e3000 R11: 1ffff1003403c722 R12: 0000000000000001 [ 1720.106515] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8801d618df88 [ 1720.113767] FS: 00007f1314235700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 1720.121988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1720.127861] CR2: 000000c4288efec0 CR3: 000000018a766000 CR4: 00000000001606f0 [ 1720.135139] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1720.142408] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1720.149670] Stack: [ 1720.151803] ffff8801cf8eef90c ffffffff8143b1cac ffffffff8143b160c ffffed003403c718c [ 1720.160011] ffff8801a01e38c8c 0000000000000041c 0000000000000001c ffff8801cf8eefa0c [ 1720.168228] ffff8801d618df88c 0000000000000001c dffffc0000000000c 0000000000000000c [ 1720.176454] Call Trace: [ 1720.179021] [] find_get_entry+0x6a/0x540 [ 1720.184711] [] ? add_to_page_cache_lru+0x2a0/0x2a0 [ 1720.191271] [] pagecache_get_page+0x4b/0x720 [ 1720.197307] [] __find_get_block_slow+0xc2/0x330 [ 1720.203603] [] __find_get_block+0x23e/0x4c0 [ 1720.209554] [] __getblk_gfp+0x189/0x710 [ 1720.215155] [] __bread_gfp+0x2d/0x270 [ 1720.220584] [] fat__get_entry+0x4c8/0x8f0 [ 1720.226375] [] ? kasan_slab_alloc+0x12/0x20 [ 1720.232323] [] ? __d_alloc+0x2e/0x8f0 [ 1720.237750] [] ? d_alloc+0x4b/0x180 [ 1720.243006] [] ? fat_bmap+0x440/0x440 [ 1720.248434] [] ? check_preemption_disabled+0x3b/0x170 [ 1720.255254] [] fat_search_long+0x277/0x1180 [ 1720.261230] [] ? perf_trace_lock+0x11a/0x520 [ 1720.267279] [] ? fat_parse_short+0x2190/0x2190 [ 1720.273486] [] ? __lock_is_held+0xa2/0xf0 [ 1720.279278] [] ? mark_held_locks+0xc7/0x130 [ 1720.285231] [] ? mutex_lock_nested+0x572/0x870 [ 1720.291442] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 1720.298274] [] ? mutex_lock_nested+0x596/0x870 [ 1720.304490] [] ? vfat_lookup+0xd1/0x530 [ 1720.310093] [] ? mutex_trylock+0x3e0/0x3e0 [ 1720.316134] [] vfat_find+0x134/0x180 [ 1720.321478] [] vfat_lookup+0xe1/0x530 [ 1720.326913] [] ? vfat_unlink+0x2d0/0x2d0 [ 1720.332605] [] ? lookup_slow+0x141/0x470 [ 1720.338295] [] lookup_slow+0x23e/0x470 [ 1720.343825] [] ? page_put_link+0xd0/0xd0 [ 1720.349519] [] walk_component+0x716/0x1bb0 [ 1720.355397] [] ? selinux_inode_permission+0x248/0x4b0 [ 1720.362218] [] ? path_init+0x1580/0x1580 [ 1720.367911] [] ? security_inode_permission+0xc5/0x100 [ 1720.374755] [] ? __inode_permission2+0x9b/0x2d0 [ 1720.381053] [] ? set_root+0x2ed/0x440 [ 1720.386482] [] ? vfat_hashi+0x11a/0x380 [ 1720.392100] [] link_path_walk+0x889/0x1200 [ 1720.397965] [] ? walk_component+0x1bb0/0x1bb0 [ 1720.404101] [] ? __mutex_init+0xca/0x100 [ 1720.409799] [] path_openat+0x1ad/0x3590 [ 1720.415416] [] ? check_preemption_disabled+0x3b/0x170 [ 1720.422233] [] ? do_sys_open+0x20b/0x5c0 [ 1720.427926] [] ? path_lookupat.isra.41+0x410/0x410 [ 1720.434488] [] ? perf_trace_lock+0x11a/0x520 [ 1720.440538] [] ? perf_trace_lock_acquire+0x530/0x530 [ 1720.447286] [] ? __lock_is_held+0xa2/0xf0 [ 1720.453104] [] do_filp_open+0x197/0x270 [ 1720.458705] [] ? may_open_dev+0xe0/0xe0 [ 1720.464308] [] ? _raw_spin_unlock+0x2c/0x50 [ 1720.470260] [] ? __alloc_fd+0x1d7/0x4a0 [ 1720.475863] [] do_sys_open+0x30d/0x5c0 [ 1720.481380] [] ? filp_open+0x70/0x70 [ 1720.486722] [] ? security_file_ioctl+0x8f/0xc0 [ 1720.492935] [] SyS_openat+0x30/0x40 [ 1720.498188] [] ? SyS_open+0x40/0x40 [ 1720.503444] [] do_syscall_64+0x1a6/0x490 [ 1720.509159] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1720.516075] Code: c8b c90 c80 c12 c00 c00 c83 cfa c02 c75 c20 c48 c8b c88 c88 c12 c00 c00 c8b c80 c84 c12 c00 c00 c48 c8b c11 c48 c83 cc2 c01 c48 c39 cd0 c76 c07 c48 c89 c34 cd1 c48 c89 c11 c<5d> cc3 c0f c1f c00 c55 c48 c89 ce5 c41 c57 c41 c56 c41 c55 c41 c54 c53 c48 c89 cf3 c [ 1720.549959] Kernel panic - not syncing: hung_task: blocked tasks [ 1720.556143] CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.123-g8dd3fc2 #27 [ 1720.563404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1720.572763] ffff8801d842fcc8 ffffffff81eb9689 ffffffff83c8c080 00000000ffffffff [ 1720.580802] 0000000000000000 0000000000000000 dffffc0000000000 ffff8801d842fd88 [ 1720.588862] ffffffff81423f75 0000000041b58ab3 ffffffff843bb878 ffffffff81423db6 [ 1720.596951] Call Trace: [ 1720.599535] [] dump_stack+0xc1/0x128 [ 1720.604904] [] panic+0x1bf/0x3bc [ 1720.609911] [] ? add_taint.cold.6+0x16/0x16 [ 1720.615872] [] ? ___preempt_schedule+0x16/0x18 [ 1720.622120] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 1720.629400] [] watchdog+0x6c5/0xa20 [ 1720.634674] [] ? watchdog+0x11c/0xa20 [ 1720.640115] [] kthread+0x26d/0x300 [ 1720.645296] [] ? reset_hung_task_detector+0x20/0x20 [ 1720.651956] [] ? kthread_park+0xa0/0xa0 [ 1720.657577] [] ? __switch_to_asm+0x34/0x70 [ 1720.663450] [] ? kthread_park+0xa0/0xa0 [ 1720.669092] [] ? kthread_park+0xa0/0xa0 [ 1720.674708] [] ret_from_fork+0x5c/0x70 [ 1720.680607] Dumping ftrace buffer: [ 1720.684292] (ftrace buffer empty) [ 1720.687984] Kernel Offset: disabled [ 1720.691598] Rebooting in 86400 seconds..