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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(0xffffffffffffffff, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r7, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r8 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r10) r15 = dup3(r9, r9, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140), 0x4) r15 = inotify_init() r16 = dup3(r15, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(0xffffffffffffffff, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(0xffffffffffffffff, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = dup3(0xffffffffffffffff, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x0, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = dup3(0xffffffffffffffff, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r14 = inotify_init() r15 = dup3(r14, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r16, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r17 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(r18, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) r20 = dup3(r18, r18, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = dup3(0xffffffffffffffff, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = dup3(0xffffffffffffffff, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:45 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000032001103"], 0x1}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 09:12:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) [ 627.474457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.483362] tc_dump_action: action bad kind [ 627.488148] selinux_nlmsg_perm: 12275 callbacks suppressed [ 627.488158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.506717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.519515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.535788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.552844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.565769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.582240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.594739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.607119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 [ 627.619610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24388 comm=syz-executor.0 09:12:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() dup3(r16, r12, 0x80000) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = dup3(0xffffffffffffffff, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() dup3(r16, r12, 0x80000) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, 0x0, &(0x7f0000000400)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:47 executing program 1: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:47 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:47 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() dup3(r16, r12, 0x80000) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:47 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:47 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) 09:12:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, 0x0, &(0x7f0000000400)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() dup3(r16, r12, 0x80000) r17 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:48 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, 0x0, &(0x7f0000000400)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r10) r15 = dup3(r9, r9, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r10) r15 = dup3(r9, r9, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:49 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:49 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) timer_create(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000032001103"], 0x1}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 09:12:50 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) [ 632.418180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.433225] tc_dump_action: action bad kind [ 632.494387] selinux_nlmsg_perm: 4785 callbacks suppressed [ 632.494396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.513016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.525744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.538407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.550856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.565000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.577914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 09:12:50 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) [ 632.590472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.603005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 [ 632.615954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24828 comm=syz-executor.0 09:12:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 2: r0 = syz_open_dev$loop(0x0, 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x0, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x0, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) [ 634.124443] ip6_tunnel: @ xmit: Local address not yet configured! 09:12:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x0, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 2: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 2: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000020028080003000400e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 634.894923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.903654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.914024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.923157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 09:12:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 09:12:52 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = creat(0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2Y\x00\x00\x00_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000440)='./bus\x00', 0x9) fallocate(r6, 0x0, 0x0, 0x2000402) fallocate(r5, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, 0x0) 09:12:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:53 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 09:12:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:12:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:12:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) 09:12:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x800008800000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1b6) setresuid(0x0, r3, 0xee00) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 09:12:53 executing program 3: 09:12:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:53 executing program 3: 09:12:53 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:12:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:54 executing program 3: 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, 0x0}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:54 executing program 2: 09:12:54 executing program 0: 09:12:54 executing program 3: 09:12:54 executing program 0: 09:12:54 executing program 2: 09:12:54 executing program 3: 09:12:54 executing program 2: 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 2: 09:12:54 executing program 3: 09:12:54 executing program 0: 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, 0x0}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:54 executing program 3: 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 0: 09:12:54 executing program 3: 09:12:54 executing program 2: 09:12:54 executing program 2: 09:12:54 executing program 3: 09:12:54 executing program 2: 09:12:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = dup2(r0, r0) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x105082) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000540)="ea4181f87105966c381922fac98eee741823579b6ae39c5ebdb078873eb430041b4163063237b8a8078b52d775220ac265faa8b70dbac2df446ac9e9264a76aa6c3b7f03d0617c25be8d92c711708d0a0dd1888ca5acf2be8a06c311d4c11b4e65c8d375d49143dcb9074813acfa6b5963882fe02ff2b55517717e977602fab38a9b6490814519c6a4b1d724761d1c531f64469a1375b06d87455230", 0x9c}], 0x3, 0x81001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet6(0xa, 0x1, 0x24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 09:12:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000)=0x890, 0x4) 09:12:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:54 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 09:12:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, 0x0}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)) 09:12:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:54 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, &(0x7f00000001c0)}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x2, 0x80002, 0x0) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = dup2(r0, r0) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x105082) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000018c0)="51494165c5e120b42c0ff3fcbd8eb546d9f8d3be215dff7c08b3be2143e55c0fd986a2993833faebe335d53c94e29bab682fa218306ceff919f78c12297375b318926b5a6652043f2e3f5a2737f1a26a34b3d193d944cfc662d470f097ad64a3c6cd16558f4294754ff8b83458d2d33d5851d64b49c5369712c0b7bc5d4a1fceb3865efa02fa0fd5f3d3fba9d459f96feff4c40bc422193c94bfe9ac5790abd409531758f6af0c463172b3dfb2aafa122c95721cf0e816710e409ede0fd22ef51120175aae6b96942cfe7cae6230aac358e5a655c42d6ea5a7b2d3871d5f06d44b35e22148af512268253569dd4306e4d30c13594669a18837648b13a8b0b370fee8f55a6604131fef92329606ae4a88bc37fd009d58f1e02bc681976355eafb34be971c6c6cd90fba0e531e6a007b9d29afd34a0782ec12ea861867a04a1bc1a7c2568284ce7a2b4443b43c7f0f51cc97e56ca01c24c57703574dcf6e4e1bb06740544caa6041ec7638477253d44003b601f5dfabc5a916cd0359ab82c7be63699a48a46c4b6f3a6cf2aaf280bb37e309fcb112016b2fb1d1e8bb50b5e33aea75ee4e544e829295b40033eb7b067b648c393480eb274b2815af3643cc0aa2d94f58d72c84bfebd367cc7308fd5d49e52f9e1e9d97e4d0e5cf5316de709474b0bbe9d3be493ae3ea5d819b6bfea5108e0563c4187c1b368d01e9dfd799f1b48c8f75bee3b82c88e3580fbaf248056d11926cf0701005d86eec29bf8b0bc495a8526f4f6810e0671c0bfbc8a3b333df79bca284c4c79a7fae0c41caf03be057bd0c9fd0354323e4205aac536d349ee8e865713325ab0d6025ad4fc9576d8a9ba215d94b32823dd9f287f7540b5e2494f4a93afe75a9a9dc4aa0345a8a57afe3198a589b2e12a6b18d4ca240ee8e1e7227930bb378105c458832f904d366f56e4f757557176405ab5df02c10f341574d6f9e468127981d48f46924f0cb99e0a94231a28ec4c37f9d9a20cde48f15a048fb2a25a420f1ba57fe931f89d1521d2cfc6b8d992197a7bac4b9cafcea376a0464a47ff498e0627677aa462df2fba97a1ae11dbbbac789616800b4c991829303e0220292afcbcf9e9724f7eecac476fb7e32aac79fdca699046d69d821bbb688ee8df9c513957f850ecede82e603ba082aaf9fc4cd7318bce7d442aba73442c42bca1ff9179ee5ab1c84e5c0fb1de80fe6d15bcb9929be2d4fb7e0e5d005b71258da13dae98a731e05b9098eb761491fc9b240576be182b99658f352c58bd34d0dc85da3a2b0ffb99b13640ae138a9e019eae98e37478b8789cce63583e3b7c10635e115743c2a7daeb53efb7e415c08b5aff2922b87da0abe2db197449fd9e4604327823a8a6d966a9e79796657d404b19573ca106c60f5c4f03d120a8c890035f91ca09a8dc6598bad751bb2ce72547952f3d3421a72f82b78de32a9f9760d0653169ea6e212b1761736f8959c256c5339f92e166fb6a2066497ffeb280e5c2a1c50475f83ac8c6958844749b6306643d761b70e4e7969e3906949818b14480e8d73b741e8a9a5bed1b31a4499e9cf54a08802b24427c9042b3fd808018bf9a153c1ccdb9e012d1979766bf1959b6065c82a7bebc9f18f2a0082ad41eb40c2dc6c37051e056131c6d723e48ea5e39159ad9993e7c5941f134866d13e7f2092458a1d0f3a45a7b035d8963da20d7e5ad7e0801397b2151d04a5094a59a3d651b1efae673cd56424aaf3873ceff383f26eb9df5594e03bfae20ddf670784c9fb97bd48ebdb6cb1e827bef5117900fbd975aa5034059f382449b8bd685d091be1f3bfd41a6b606267625069a9cb8aa3b83fa9e2da61267fadd144fbc60d35e4209778de1a1fd1c7b43525ee685209540ac7b8b571df073d704633546f7fb4ba940bc2ccf99871c5f0132abe5b442a052e292b492d7fca4a12a5739a459dd79dcaf1563238ce81e2bfedfb1a099d7ffc092c4b1b60a88238069b82529827a71d8aee5e8d3e116a4f005d088368b0fbf46a717b30057936c249050982ca18d16a0e5b79a6b131cc70b0a4f90862ef278e0763a055b738f872f76815be66435a20d735eaba6a9e0bd01bd70d33c1aba2c29f04f2471a49bf8ffa7d9e464cc7c34091bbcb5d8105939ad70e4718c0a0b164e3e6814c803366f43ab40ef379f431c2020e57bfc471301ce6da88b33baaba12d091e65200a2456a219513e7ad48a56e03fc672b1c64cebcea4c4bbd621de13a96b60a43ee877fc78ba57338f8f5dc098903e4584ffea660c91dbb4f073df10933e7fe950f140b6af069f25d6855bb380c823fcaf010917bc129dc6b2fe2c244f003ea8449a78524e82384fa0631abdc27257c927ae4550ea15e1fca9b4e580d60614f169c8c8ad43290c75204f4c44403f8e43371ed23dc811ab823c76302a0beafe47b59f5599574dce3d211637a20305a246c315539268c71de81affbdfba869f5f66a533909bfb1b59bb75adeb659e0c3cf86620abf055d2a082d5f2ab549a3e555e44469ab3ae1f7419563fc043aa6e049086c5db1729134b4b9687738b99e28f6b5776874d218ce4d20dde800bc3c0404d8ed5066a15151d4fd7a0cc97dcbddbbcbffda0c99ff82bb3c4e7e7ddd253fef61e5b3868ef499a85b1f8f1b57f3354195eef36caaa82da24ac1058d3fcf3bb19016f7673cc40d29b28f2f87477b5641a2b168f3f4d0525a37965c7e2dc69e205a41b6e395a0e11ed4c0f85b6a3dfdbee728122c555d5b38e494f08ed19232e49af0e527ae85c4f22972efaf36d2e4112b23c383582f4b5fec19f01cc9115e11c4adad8188270f6ed6f9160834d7b758515b48e3fc10ec377a9561869a8e52c9d77108290f9039fc26b71a156d61a3c41719ce2f4f65e546a9ba65cb9af13e5069011b74b57a827d7087ecec7a74bc4bbc87f37d37f3ed2b18ff0a84bc0849df90a6347a2252fc0a57db0a12010b6085a974d6500e7b35c6a179ae15d52a71a5dc2539877d7e610eb53764ccbc454a07f2a844f731dfd3d137ae2bbf3c3d6f3188a8e0c1da5323616cf67222965e245bcbb47da9808e0287fe4cd60fb70dfe0807ffad37a8b99c288c15ba05d98e7acd08c23e2fadfce460ae328180eba87382bec18e2ece31024bacb3b583cd417b93d5dba7842e3dab9b77852670675adf9312243b7f95e5e60e5e083e3f1d07c9a2bc4cfffc03b076bfd1e1b6d87a9c90ef06a6ac32f9de1d95fc5016479cbf8fbc92a01e4b521c056a3b630b6a44ebb4dae2f9479640fae821cce9d461b68938f3efce9a62c273b7a383b839eff22cbb8f61102a6c3445ec081ac6eaa2eea20eb432c9aff42be7eea36526915402c4cae6e7a423ebbd28735315cc2ef7b9ca8065ea45c0646964cff672b14b9f73ac8e42644059b79876849d39aee6e54d652424b8f11dc2da9890443f54f72e6eaa530d492c2b2efae25300020b0653cb94c9ba07e1fc37372b64c876fa93972b197ddca2cc58bd2447953f803d4de97420ea0961a23e38c6ebe35d1cb240f552f9031baacd42d4583b675e2a970c6dfbcd9c82448b28205ff8402d94ba766c05ab2823e46330859cf4df5b80ca3d1106784b780728c301804506f23aeceee7d9cf941aad77c7ccc1170e3edd2b12423d38fceffeb67c9fb58c4ad43bbcf69d8304ab0d919d402299c1e28eaca9b07eb7a9851cdaa9f4168d208d569d8c5d8531317be6253af2af8465d4156a7f4bfec5a698d1f0b5d37341927f2d1d8b87c9e8f81af966f5ba75eeebe2308e5fadc6042ff83ada57cd91ab75919d8c342392fd9744b4caed6b3015c692e82f4966f839df200c821f7c299a20a8f489a020eb8e4d3aa5ef316979b5982a2a0fdbc75fdc65116084f7c39a8cf818dcedabec8a16e36272b25264188bfa4d40438ee4e7537754cec02866d3626ab365ab0096c37be9c5a471f1b2c0e9ec20cc334eb05fea707830e61292ee8281657d9e125b28b98a0afa49854781328290b3b5f070ac39555369f6550bf60a7cb275b3f39b799d1ccc1f143a261275ab9a98dc79ec03a55ca7575a818953e31081c46053723b0b58988bb386dcedf49ac679a6a3d3ea34c0fe0e86438644cb99c01f8875d980ea8a818bcb384c146e39c43c16e1fd4e4321ec0ab801688cf9968f75e8b84f9fe2cfbf594b04b401d7878dbc6476e71234fc4b778e6ad197280469f81ec0ad79ccf4b617a0b60b29521d83ceb0b8a7eaa60ea324ebaf95c2ee759e9ceb4b7b3afc5ab775b0eebf5c010185427bc49139ef4b181b63c0153ea11c4e8c954abd4381a6849deaeb4761b5b57ab560b15462584593dd966e38e9ec5ea4a7c6d6e5eb69685d1afd4edfb72617b0e5aadbfbdf59a3937cac87be1e6d15efad65f6e5d3a53c610e373929542161daed0cb0619747399f109a3c6a760ab5c93f4352d5f1becd708bca9b172658b27c028ead7488a356d0afa486885d32fb8cf166859bbda9d8eb9b865e10576bc9c89d3a9ab816b9d76a703247c801a0a90e0fe90d8f8042fe3f7d980824025eec253c1fa937074977ec89f33f1b312254ee1b48b1fc2843a0d270b2711a65fcfc19d4775abf632055c6b6cd84294ccbd14a915a487280d2c0f80a2aa62574bec0b62cec89118f5ae48591dd7e706ad1a2af1176af578ec133ffe308df003b0543f47dc60c32e712b1b306bd6714e1926eb9f465919ce2bf92eb730effd7ee821678b4738e26b2408ad8d212c0d96cbf3ee49e91875602c2bc1645cf10904a08ba66233c4ade394afa0b3136ae0c9bcee4c775fda373ed711cee11025d0d44622b820c8df3b2c06226fe66ae6d7999a7be300a14e9d63e02be512a34fc07baefd3af42e1e731c5130d42d1e082441ac42e3f8c80d614453385f67eba585a4dad3b31ea79d51124dcfa5599ff216c0722d0a0858f91d4425fd1f3a010d02d0fcbe8de84cf1cac30e931bf68c438b5d5ffbd0ba24a50eb99fda1d191ef19988786901d51834796c5b2cedbb00b93232f1b4e469ee53c18f44f1a4dd096817047f25f5f03986db18c7b1cab7e5dea66283f7f4c133e7375ffdbd8c963bcb880770f163d7abd0d7c42e152b7c72294c2b66420b353fffeb9130d080089b0c21cea7e3481605322c1454ddad78a05e44f31565736fb6de99e6fefdf97f62c8e0fc241399a38275215dc2314ea747f3b46f99316c348d363df2c28cf41fba58e24afb16893dae600b93fd1962afda1f31a74d0cf811549d7bae701840b7a0b19e6758c9f0b4c4cf26d5b7ed29690bb14de5503766a854d4fd6dff24d8620251657b4c99ed33f33041a87993071a826992d600b58ea351a6aca5609c4dd45c6d48021afc84a463cf2779571582203d9b71b39308490065f02d7e9c3f23c73c83f95820b307a56381c33527c3b94411fb1c2a2acd06a97c59486053d5d8d6dff684053245943b36dede69655a28f86e7e6055c4849b787c33f9e5f13e96cd27d581981871a4dafed017e140792a9de08212cee8d1d56081fbaa182794dbdd069161f54855ac50d07a0d0a111a2d6455d316fa2210b3e0fc9c434c56f1e97e9745729d9001bcb46c6fa162fa7019154bc8eead3de95f735623c137bebf7ebea0e323d233f36f2bd50281105e11cb5322817a5a55a440508ffc0dfee685ce3a8edc85940808582e888f00038f6f0b4349daeafff72f998e81919321d35ea5ab6a43e541d33baabdc1c5c3fed534c96cdc81aff544fdf54db2c5137ab2b77d6dc6c2404c874727f09db7037a4d4198", 0x1000}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000540)="ea4181f87105966c381922fac98eee741823579b6ae39c5ebdb078873eb430041b4163063237b8a8078b52d775220ac265faa8b70dbac2df446ac9e9264a76aa6c3b7f03d0617c25be8d92c711708d0a0dd1888ca5acf2be8a06c311d4c11b4e65c8d375d49143dcb9074813acfa6b5963882fe02ff2b55517717e977602fab38a9b6490814519c6a4b1d724761d1c531f64469a1375b06d87455230", 0x9c}], 0x3, 0x81001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet6(0xa, 0x1, 0x24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 09:12:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 1: socket$inet6(0xa, 0x80003, 0xff) r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0x0, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, &(0x7f00000001c0)}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:55 executing program 1: r0 = socket(0x0, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:55 executing program 1: r0 = socket(0x0, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = dup2(r0, r0) listen(r0, 0x80) flistxattr(r0, &(0x7f0000000a80)=""/114, 0x72) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x105082) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000540)="ea4181f87105966c381922fac98eee741823579b6ae39c5ebdb078873eb430041b4163063237b8a8078b52d775220ac265faa8b70dbac2df446ac9e9264a76aa6c3b7f03d0617c25be8d92c711708d0a0dd1888ca5acf2be8a06c311d4c11b4e65c8d375d49143dcb9074813acfa6b5963882fe02ff2b55517717e977602fab38a9b6490814519c6a4b1d724761d1c531f64469a1375b06d87455230", 0x9c}], 0x3, 0x81001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) socket$inet6(0xa, 0x1, 0x24) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x0, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x0, &(0x7f00000001c0)}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:56 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 09:12:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:57 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81003) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) 09:12:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x58, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:57 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:57 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x105082) 09:12:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:58 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x105082) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0), 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x84, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r18 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r18, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x105082) 09:12:58 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:58 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x84, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:58 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:58 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:58 executing program 3: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:58 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:12:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x84, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:12:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x9a, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:59 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:12:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:12:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 0: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) fcntl$setstatus(r0, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x9a, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0), 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:00 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0), 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0), 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0x9a, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:00 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:13:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:01 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xa5, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd66"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:01 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) dup3(r10, r10, 0x80000) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xa5, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd66"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:01 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:13:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xa5, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd66"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:01 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:02 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xa5, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd66"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r15 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) dup3(r10, r10, 0x80000) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:02 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:02 executing program 2: r0 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x7ffff) 09:13:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:02 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:13:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) dup3(r10, r10, 0x80000) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) dup3(r10, r10, 0x80000) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xab, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:03 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xab, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) dup3(r10, r10, 0x80000) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(r19, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) r21 = dup3(r19, r19, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xab, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:03 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x600) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r10, 0x4) r11 = inotify_init() dup3(r11, r7, 0x80000) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r13 = dup3(r5, r5, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r15 = ioctl$LOOP_CTL_GET_FREE(r14, 0x4c82) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, r15) r16 = dup3(r14, r14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) r21 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xab, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xab, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) r21 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r12) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r15 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xae, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4d"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, 0x0) r21 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r21, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r15 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r12, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000140)=r14, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r15 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r15, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:05 executing program 1: timer_create(0x6, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000001c0)) r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000200)="0900000000ff7f0000130000005de5a20080") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000040)=0x80) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) recvfrom(r3, 0x0, 0xfffffffffffffe71, 0x2000, 0x0, 0xf1) 09:13:05 executing program 3: rt_sigpending(&(0x7f0000000000), 0x8) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x101082) 09:13:05 executing program 2: timer_create(0x6, &(0x7f0000000080)={0x0, 0x20}, &(0x7f00000001c0)) r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000200)="0900000000ff7f0000130000005de5a20080") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000040)=0x80) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) recvfrom(r3, 0x0, 0xfffffffffffffe71, 0x2000, 0x0, 0xf1) 09:13:05 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x1000) pwritev(r0, 0x0, 0x250, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000040)) 09:13:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xae, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4d"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:05 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'teql0\x00', 0x4}, 0x18) 09:13:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:05 executing program 2: rt_sigpending(&(0x7f0000000000), 0x8) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x101082) 09:13:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040)={0x30}, 0x30, 0x0) 09:13:05 executing program 3: 09:13:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket(0x10, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:05 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x26c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb353}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x101, @rand_addr="387aec6d4ee1152b5ae9d57fc0a0a675", 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x8f5e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1ff, @rand_addr="bf570be6e8a78548e6a70e1f1aec05b4", 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @local, 0x10000}}}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1c07, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0xe, 0x7, 0x8}) 09:13:05 executing program 2: seccomp(0x1, 0x3, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) 09:13:05 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x548, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, &(0x7f0000000300)="69efddb0a044d6e72de3618894946383ce38b826dbc8d47bf6c59d609db65bb4a60ca95c2f314392825b73fe398c3402f0d6808bc04d201c5d7592674af560b72421e3483e7167277a7f7c3da99973a6fb7de339528f5f3b0c963b38e35328bdcf7bcd227ed4769fce99ae132a351b37d02ce025de2ca096d0a9cb61f25017f519ca01ebe029da655241f50a2e47523f6219eead23c08c4d708b090bd4f091c5aefb3952f01b260a9a4669e1bd8ef457"}, 0x20) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x103800, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x800, 0x78bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x2, 0x1ff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4808c}, 0x48040) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x1ff, 0x800, 0x401, 0x2, 0x1b, 0x12, 0x8, 0x40, 0xe8, 0x3, 0x0, 0x2}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/252) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:05 executing program 2: syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x800) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000200)=0x1e) 09:13:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xae, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4d"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)='/dev/keych\x02\x00d\x00', 0x0) pwritev(r1, 0x0, 0xfffffffffffffee4, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) init_module(&(0x7f0000000040)='s\\*\x00', 0x4, &(0x7f0000000080)=']security#!cgroupvboxnet1posix_acl_access\x00') getcwd(&(0x7f0000000180)=""/138, 0x8a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x85ee, 0xfffffffffffffff7, 0x7fffffff, 0x6}) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8000, 0xf6, 0x3, 0x8001}, {0x8001, 0x6, 0x7, 0x7}, {0x6c, 0x0, 0x6, 0x8e7}, {0x7, 0x7, 0xf3, 0x9}, {0x40, 0x9e, 0x1, 0x9d98}, {0x7, 0x5, 0x0, 0xffff}]}, 0x10) 09:13:05 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@generic={0x0, 0x1, 0x77cc00de}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) 09:13:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:05 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20100, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000005c0)={0x0, 0x0, {0x9, 0x2, 0x2, 0x1, 0x7, 0x2, 0x5, 0x4e}}) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)={0xf, {{0x2, 0x4e22, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}]}, 0x490) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) 09:13:05 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) 09:13:05 executing program 1: r0 = socket(0x8, 0x2, 0x40) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xfffffffffffffcfc, 0x0, &(0x7f0000000000)={0x2, 0x4e24}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:05 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x1000) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000080)=0x6) splice(0xffffffffffffffff, &(0x7f0000000300), r2, &(0x7f00000000c0), 0x6, 0x2) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xa102, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000380)=""/238) r5 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) accept$unix(r6, &(0x7f0000000200), &(0x7f00000002c0)=0x6e) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000180)={0x2, 0x7fff, 0x0, 0x5}) 09:13:05 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x548, 0x4) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/163) 09:13:05 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) rmdir(&(0x7f0000000040)='./file0\x00') recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0x6, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x2, 0x1ff, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x801e1400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x14, 0x8, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) [ 648.187446] audit: type=1400 audit(1571735585.847:180): avc: denied { setattr } for pid=26401 comm="syz-executor.3" path="/proc/6397/task/6398/attr/sockcreate" dev="proc" ino=235991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 09:13:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xaf, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da1"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:06 executing program 3: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x179001) syz_open_dev$loop(&(0x7f0000000280)='\x00\x04\xc0\x00', 0x0, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1ee69c3ef347fce3) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0xfffffffffffffff9) 09:13:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f00000002c0)='\a\x00\x00\x00\xe5,\xea\xd4=\xcbe\xdb\xa2\x16\xfd=\xde\r\xaef\xc6\xcaX\x0f\x19\x7f\xd1;\x0e\xdbd|xlR-Kj\xb2T%\xe2\xf0\x05vkln\xdd\xdf\xe4u\xc7\xd3!f\xed\xc1z\x10\xe0\xc4u\xf2\xad\xb1owK\xfd)\xd0 \x8a)\x9f\xa8\xc3.\x03t\x1e\x198J\x81\xf3\xf3\x99\x95\b\x91\x1f\xbd\xaf\x13\vd\x18c\xd7\xba\xbd|<\t\xd9\xe2a\xc3c\xb7\xdd\v\x12\xc8\x8d\xc2a\x18j\xfb\xc3\x8e\xd5\xb3\xc6\x1f\xb8(@\a\x91\x19\x06\xa3\x9c\x89\b\x11\xca\xee\xbfs\x04\xe4@tO7\xf1`\xd4IJr\xfb\x86*imS\xc6\x0f1j\xba\x8f\xa3\xd7\x1b\xbb/\xe4uhv\x84H\xbb\xb5I\x97\xca m\xac\xe31G\xdf\xe5\xa8\x9c\xb2', 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) pwritev(r1, 0x0, 0x158, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:06 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:06 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c6530200374727573746564200ab9523f7741103193b4a413c2b880cbaf720dd128518256b59b42d3cf9d63a8717fe5d9d4f55b3f631b153aa84fc5434e4fdf53bdbb9287b99088f53acab475d32d27b1390d6256744ecb58c32e43356d847f1a1324560b311213680721e737fa0a9e1789215f8f11eac83f8aed1cd81a0231fe8199de000000000000000000000000bfccf2b22f011193"], 0x98) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$inet6(0xa, 0x803, 0x7) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'os2.', 'ip_vti0\x00'}) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x40000) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@rand_addr="4f7688f654cb2dda321475682f53914f", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x20c20082, r3}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="93993974d566da0e3578d082d7ae73b9"}, 0x1c) ftruncate(r0, 0xffff) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000002c0)=0x4) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) 09:13:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xaf, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da1"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:06 executing program 1: r0 = socket(0x2, 0x80006, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x3f6117ac750dcb1c, &(0x7f0000000280), &(0x7f0000000240)=0x13b) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt(r0, 0x4, 0x9, &(0x7f0000000100)="680a85b0870992d894d2b3e88e0407eb547a39acf8f62c5f21b0cac4b642612cea88623c392573d20b180aaa49e71552c5d7c79d934d33657915c6e7686498053eb39b5e9a953e7217498ed6c76e7509282bfa15f91e173772f8c9429dcdcf3d9d9fa944d22d11d023ade230a5e12ad912546b7205d482ca4576e5755fa9e972c20fc8646b37ee6b8ee5eeb84eccec1fb458653f92fdc635b9e6b9d19b88baa57dda8510b55ff74fd1ac1bf96fab43551aac5dc3d9c68230", 0xb8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @descriptor="1553484f1b5ccb13"}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x200, 0x3, 0x3f}) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2}, &(0x7f0000000200)=0xc) 09:13:06 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7fd, 0x105082) 09:13:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) fcntl$setstatus(r2, 0x4, 0x54dc509e7d2e4944) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 09:13:06 executing program 1: r0 = socket(0x2, 0x80002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00') writev(0xffffffffffffffff, 0x0, 0x0) 09:13:06 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/\x00\x00\xa6O\r\xcf\xa7\xc2\xa8\xed', 0x0, 0x40) 09:13:06 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='\x06\x00\x00\x06\xb6\xf8\xff\x01\xff\x00', 0x9, 0x80) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/174) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/171) 09:13:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xaf, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da1"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0xc, @random="91db50a116e2"}, 0x62, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gretap0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:07 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/\x85ev/\x84\x99op#\x00', 0xfffffffffffffffe, 0x482580) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) 09:13:07 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) r2 = socket(0x2000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r2, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x3005865}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x6}, 0x80, 0x0}}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80001810}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x194, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x972}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe53d, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xb3b0}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x17c, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff5541}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe165}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x480000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff2979}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd6a}]}]}, 0x17c}}, 0xc0) 09:13:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:07 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x200, 0x38d482) 09:13:07 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xec, 0x2, 0x9, 0x8, 0x0, 0x6, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5954, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x1c7b2, 0x9, 0x1, 0x1, 0x100000001, 0x80000000, 0xc16f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x7}, @timestamp, @timestamp], 0x3) 09:13:07 executing program 2: seccomp(0x502f0732b7b7e14e, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x1ff}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80001810}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x2e0, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x972}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe53d, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @multicast2}, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xb3b0}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0x1c}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x95d25bfaaa8ca9f1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x220400, 0x2cb4812b528473b4) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000640)={{{@in=@empty, @in6=@loopback}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xfffffffffffffdf7) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000080)='smaps\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xffff}, {0x1f, 0x3}], r6}, 0x18, 0x1) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, 0x3, 0x5, 0x8, 0x70bd2c, 0x25dfdbfb, {0xc, 0x0, 0xa}, [@typed={0x8, 0xa, @pid=r5}, @nested={0xa4, 0x4, [@generic="69cc279cd1b4c5759c361bcfc335c82a8de14018cadfe7062b56e8e30c791cbe13a4a331b80cae7201df2c809857d026452ec4da9e3af9fc05bf268a710f250b1b13f6c6f4f0e9441c7903cfeb49f34867f0", @generic="a6ae931ada2832b42168a316a8483beb02d99a0e07df5f6bd446e96459cca7568135c827528d66e7db0a524149733750af843244d4c0187fb10f0cdd5273e2c080a6", @typed={0xc, 0x38, @u64=0x288}]}, @nested={0xd4, 0x96, [@generic="307fb9bf46597e286f85b62e5fe65d23b30caa3fd38523f5c2e22cbba780c8a533b020a1ba9858bf4c78590d01a1ab00f00dae83efc9d9dc0284511ae2effd9f2cdca84cd6627acf3e2c26be91c9dc79c7dce8f23d6460c5716c5d1a433e20fbc9378f33f92490b609395f6e2bb4d661d007e1f08fd024b640c185b7268829d9951b88c0ea70d3dffb3a2221a20ac6e097158e79940b07f8c5d72107d6831a735b16c6e7299eea6e563a1941d0e1bae58692698587b63255601800c31202748d56ebf7763e65e3d4546073a0da"]}, @typed={0x14, 0x33, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @nested={0x18, 0x5c, [@generic="f36efccccdb716c2219bc5a4", @typed={0x8, 0x21, @uid=r6}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x1000) 09:13:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:07 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0xffffffffffffffee) sendfile(r1, r0, &(0x7f0000000040), 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:07 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x1, 0x5, 0x7fff, 0x6, 0x10001}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x1, 0x3f, 0x3}, {0x800, 0x5, 0x52, 0x40}, {0x1, 0x57, 0x8, 0x781}, {0x5, 0x0, 0x8, 0x3}, {0x7, 0x7, 0x1, 0x41}, {0xff, 0x9, 0x80, 0x72}]}) rt_sigaction(0x18, &(0x7f0000000280)={&(0x7f0000000100)="c4e1e5e907c4025992942996e6b26e66646667f00fbab7e18d0000ca67f30f2a1b646664f0470fbaaace00000069c4a3454c984200000003644610508965f7df66430f38f6b865566666450f1745fe", {0x5}, 0x10000001, &(0x7f0000000200)="67f2470f1064ec79c4636549a56556666600c4017d50ebc4a11dd5e2c42159fe9950e60000c46265abf90fb48f5a3d8a20c4227d79f3c4c19171f400c4e185df7b06"}, &(0x7f0000000340)={&(0x7f00000002c0)="470f2a575f45d1da66430f3a16de00c462b13701c4e165d04e8c26f20f2cc72666470f69a990eafdd86666410f2c2ec461f9ef4947c4a3315e0d52000000eb", {}, 0x0, &(0x7f0000000300)="66420f6a0ffdc461ad75afba2001f8c40359416099bb8fa878c31982c4228da6b30e000000c4c3556a2caeffc4a27d2298feefffff0ff7ccc4a1cd5d4c3f59"}, 0x8, &(0x7f0000000380)) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) getpeername(r0, &(0x7f0000000400)=@nl=@unspec, &(0x7f0000000480)=0x80) pipe2(&(0x7f00000004c0), 0x4000) ioctl$FICLONE(r0, 0x40049409, r0) 09:13:07 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x4, 0x1c, 0x10, "64fd891b0b5ec72da8e059ff6a800fb8314eb555b51e1deb6f628a8b214a904df81db021953334cf71e4903db50a4e47e2e674345968003b06cbf7c71c0a70f8", "3b0200238296be2a0409ed23b731ed40697a46a5ca06f0a787634248f2d55863bf89f4e579fd3d8f5df7b0d6c0d527245b712263e66ea3388eaf3d285c039ac4", "53a190536262d9f9df4102fe3888041793e31493080fd9b5c5072547daa7e31e", [0xb4, 0x40]}) 09:13:07 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x101, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:07 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x32062, 0x0, 0x0) 09:13:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:08 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind(r1, &(0x7f0000000100)=@x25={0x9, @remote={[], 0x3}}, 0x80) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x33f, 0xbe6, 0x6, 0x7, 0x4}) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x6e, @loopback, 0x4e20, 0x3, 'lblcr\x00', 0x1d, 0x20, 0x25}, {@local, 0x4e23, 0x1, 0x6, 0x800, 0x9}}, 0x44) 09:13:08 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/d\xb7}/loop\xfe\x00', 0x0, 0x101000) 09:13:08 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2a1082, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r1, 0x200, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xe7c5b594c5ed269c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xab6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6201}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x817}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) sync_file_range(r2, 0x8, 0x2, 0x2) 09:13:08 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) unshare(0x200) 09:13:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) listen(r0, 0xff) r1 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r1, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 2: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) seccomp(0x1, 0x1, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{0xfff, 0x23, 0x7f, 0x10001}, {0x4, 0x7f, 0x5, 0x2974}, {0x1, 0x2, 0x2, 0x6}, {0x3, 0x0, 0x5, 0x1ff}, {0x40, 0x27, 0x81, 0xd14}, {0x616, 0x2, 0xf9, 0x100}, {0x2, 0xff, 0x5, 0xffffffff}, {0x6, 0x19, 0x9, 0x9}, {0x4, 0x0, 0x3f, 0x9}]}) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7f) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) 09:13:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:08 executing program 0: r0 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x67d1232b50d08fde, 0x28) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x8000fffffffe) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x4100, 0x0) sendfile(r3, r6, 0x0, 0x8000fffffffe) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{r7, r8/1000+10000}}, &(0x7f00000000c0)) ioctl$RTC_AIE_ON(r1, 0x7001) pwritev(r0, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r9, 0x4c00, r10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000180)={@random="31dd9638e37f", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[], @gre={{0x0, 0x501, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) 09:13:08 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x7c57e6d50bf2a28d, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xffff}, {0x1f, 0x3}], r2}, 0x18, 0x1) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x2, 0x8, 0x3, 0x1e}}) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x1, 0x103143) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) write$FUSE_OPEN(r2, &(0x7f00000002c0)={0x20, 0x0, 0x3, {0x0, 0x8}}, 0x20) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) getsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$selinux_user(r5, &(0x7f0000000080)={'system_u:object_r:power_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x2d) r6 = fcntl$dupfd(r3, 0xc0a, r4) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='/dev/loop#\x00') writev(0xffffffffffffffff, 0x0, 0x0) 09:13:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/106) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) 09:13:08 executing program 1: r0 = socket(0xa, 0x3, 0xfd) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='c\xb0\x00\x01\x00', 0x2, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) dup2(r1, r2) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x5661, 0x915082) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) fsetxattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="627472662544feefc3da6dad65726f00"], &(0x7f0000000080)='\x00', 0x1, 0x3) 09:13:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='\x12d/moop#\x00\xf4\xff', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x729, 0x1, 0x2, 0x8}, 0x20) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x181882) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x6, 0x7, 0x1}}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$packet_buf(r2, 0x107, 0xa, &(0x7f0000000080)=""/37, &(0x7f00000001c0)=0x25) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") getsockname(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000180)=0x1b) pwritev(0xffffffffffffffff, 0x0, 0x4d5, 0x81002) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x18) 09:13:08 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ifb0\x00'}) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x7c383, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x11, @multicast2, 0x4e22, 0x4, 'none\x00', 0x1c, 0xffff, 0xe}, {@broadcast, 0x4e23, 0x10000, 0x911, 0x6, 0x9b2}}, 0x44) syz_open_dev$loop(&(0x7f0000000000)='/devB\x8bib\xb9#\x00', 0x0, 0x405463) 09:13:08 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/16, &(0x7f0000000080)=0x10) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:08 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) chdir(&(0x7f0000000100)='./file0\x00') getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000000)=""/176, &(0x7f00000000c0)=0xb0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x8000) 09:13:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/unop#\x00', 0x7f, 0x2) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 09:13:09 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x3f}]}) r0 = socket$key(0xf, 0x3, 0x2) accept(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000100)=0xfffffffffffffeed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100c2, 0x34) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000200)={0xc1, 0xdaad, 0x7, 0x9}, 0x10) 09:13:09 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:09 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) 09:13:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1554) fcntl$setflags(r2, 0x2, 0x0) close(r2) 09:13:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket(0x5, 0x4, 0x80) dup2(r0, r1) r2 = memfd_create(&(0x7f0000000140)='[\x00', 0x6) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a22d0d15283255d3af450ec1075c811f", 0x10) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) 09:13:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="850000002f00000037000000000086009500000000000000e63f435878d4c2fc2fa21f000003000000004e6f6f13651d15b6c726b30f9b019faf967efe28f7dddd66f85e4c82d89a0da02fbd6250dd1e55943e7ec97a13bf3239683387d9d3ce27a1ea801a327c7da7f5732aa4daea5e6a00000081ef1f120000010000000000d466320e3b2f5f738a5e56c59e1d1320a72818df3b7150e8eb869adb769770154f50745a64560f7dc560ef094e1d2e1eeb667a3054bdf940c206edd7b34c5f70e0cc3462be1b931f8113ce364c86a8123c66a99f47000000acea537a62234333da9f16d4592b70db71ad56d5d765b99dc0952e715e88dae5f5a40000000000008000766e2822caf7528cfc665f9aa8dbc9a7c895f94f000a875247bdc4646b63997300dcbd91fad341c5000000d045ea439cb639ca7600010000000000008da403d7d9ead9eadb64ddeddfa383fad4f4565aeab76f96c27869d1c126b81aa7ae0a5b4e6df77aee53111e0d829c918881ab7bca05a4ef158081da4c37df9d6233634734bd6f05c911cd2c97656aa8116cbc2531df148035f4430f6f94e15cdf3332f31be6063108a7b5f6be1a4ba1909a564b58ce7329fb06bdb2df5b5c979726cb7f"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) geteuid() pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:09 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0xdc57, 0x14001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) fallocate(r0, 0xe2, 0x1, 0x7f) 09:13:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0xffffffffffffff91, 0x81003) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3f) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:10 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) timer_create(0x7, &(0x7f0000000100)={0x0, 0x39, 0x0, @thr={&(0x7f0000000000)="ea8b2dd28886df7de1da935e376f461c030f0646fabff19a02e98f045f7de4e61499685ade91ddb442963f5ad9805d41c74ef5b5be71ccf753f58999d2ee6d6a627d378dec64c89dd74c932fd148f4734fe234cad62e2a9ea560809da3e4d25b31f9f7f700a135e1de74885950a5ce1316a6b41271a1f9a2a6d3e46d6913fdf71cb8d4eae8", &(0x7f00000000c0)="a2f1652f76578c559d3802b68b8e4f21ea3f16b91cecb7d3d0a721c93ea81683c86282212fb9abcd9ddb493a4e731ea37d240f8b"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 09:13:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, 0x0, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:10 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xffff}, {0x1f, 0x3}], r0}, 0x18, 0x1) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xffff}, {0x1f, 0x3}], r1}, 0x18, 0x1) setreuid(r0, r1) seccomp(0x2000000000001, 0x1, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) 09:13:10 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x405082) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff, 0x5, 0x0, 0x4, 0x8, 0x9, "9082b7e78dd0fe18e6e22fe400000000000000029a675da2badeeddc6930111504d918113237bae51bbc05eeab10a068a8269619173f1c7fcacec93f0493361b", "cd2c3f8f3ac9b4f05545cc51917bc2ca8fdf645d573698bb4c1624def65b94d7f7d160d2580523dc9c79dfdcdca7c1a625ac4979cba903107900", "9f5bbf3607bec5d073eb80a63e796e50d0331048589a50787f64eda0f0ad5f47", [0x5, 0x75bd12e9]}) 09:13:10 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x800) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/35) 09:13:10 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/8, 0x8, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r2, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:10 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x790, [0x0, 0x200001c0, 0x200001f0, 0x200005dc], 0x0, &(0x7f0000000100), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/1962]}, 0x822) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x3}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 09:13:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, 0x0, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) 09:13:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) r2 = dup(r1) ioctl$KDSKBLED(r2, 0x4b65, 0x1000) pwritev(r1, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:10 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x548, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x5, 0xffff}, {0x1f, 0x3}], r5}, 0x18, 0x1) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0xd93e2e4b927ad63f, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030301e303030303030303030303030323030303e6dca9fd7e98290690958afaddca536c60aa3791079d52a8a5b4974ada92b98d0bb8a56817d7ffaf3f912635346e3eb9912d66f969ba51bd651e01d9592f53a8acfb1b105aa8148e687bcb740f4fcf8dbff1c28b98b9dca16abbbaf979ce627ea6d5d22684dfe4e1e6ffe826f9132026c7bf1927d35699348640b75c2be26e742f647ab21e03cc6496c4fcd7986c3362a", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x00000000000000bf,max_read=0x0000000000000008,allow_other,smackfshat=!,smackfstransmute=-$vmnet1\\eth1[,smackfshat=system&,fowner=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) [ 653.366447] ================================================================== [ 653.373863] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 653.380607] Read of size 8 at addr ffff8801d6399660 by task blkid/26922 [ 653.387347] [ 653.388968] CPU: 0 PID: 26922 Comm: blkid Not tainted 4.9.141+ #1 [ 653.395191] ffff8801a19376f8 ffffffff81b42e79 ffffea000758e600 ffff8801d6399660 [ 653.403250] 0000000000000000 ffff8801d6399660 0000000000000000 ffff8801a1937730 [ 653.411331] ffffffff815009b8 ffff8801d6399660 0000000000000008 0000000000000000 [ 653.419421] Call Trace: [ 653.422001] [] dump_stack+0xc1/0x128 [ 653.427706] [] print_address_description+0x6c/0x234 [ 653.434378] [] kasan_report.cold.6+0x242/0x2fe [ 653.440599] [] ? disk_unblock_events+0x51/0x60 [ 653.446820] [] __asan_report_load8_noabort+0x14/0x20 [ 653.453565] [] disk_unblock_events+0x51/0x60 [ 653.459617] [] __blkdev_get+0x6b6/0xd60 [ 653.465230] [] ? __blkdev_put+0x840/0x840 [ 653.471019] [] ? fsnotify+0x114/0x1100 [ 653.476544] [] blkdev_get+0x2da/0x920 [ 653.481998] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 653.488931] [] ? bd_may_claim+0xd0/0xd0 [ 653.494995] [] ? bd_acquire+0x27/0x250 [ 653.500526] [] ? bd_acquire+0x88/0x250 [ 653.506064] [] ? _raw_spin_unlock+0x2c/0x50 [ 653.512025] [] blkdev_open+0x1a5/0x250 [ 653.517644] [] do_dentry_open+0x3ef/0xc90 [ 653.523431] [] ? blkdev_get_by_dev+0x70/0x70 [ 653.529487] [] vfs_open+0x11c/0x210 [ 653.534780] [] ? may_open.isra.20+0x14f/0x2a0 [ 653.540914] [] path_openat+0x542/0x2790 [ 653.546535] [] ? path_mountpoint+0x6c0/0x6c0 [ 653.552586] [] ? trace_hardirqs_on+0x10/0x10 [ 653.558654] [] ? expand_files.part.3+0x3a9/0x6d0 [ 653.565048] [] do_filp_open+0x197/0x270 [ 653.570664] [] ? may_open_dev+0xe0/0xe0 [ 653.576284] [] ? _raw_spin_unlock+0x2c/0x50 [ 653.582300] [] ? __alloc_fd+0x1d7/0x4a0 [ 653.587920] [] do_sys_open+0x30d/0x5c0 [ 653.593451] [] ? filp_open+0x70/0x70 [ 653.599160] [] ? up_read+0x1a/0x40 [ 653.604352] [] SyS_open+0x2d/0x40 [ 653.609448] [] ? do_sys_open+0x5c0/0x5c0 [ 653.615152] [] do_syscall_64+0x19f/0x550 [ 653.620911] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 653.627833] [ 653.629459] Allocated by task 2076: [ 653.633084] save_stack_trace+0x16/0x20 [ 653.637057] kasan_kmalloc.part.1+0x62/0xf0 [ 653.641370] kasan_kmalloc+0xaf/0xc0 [ 653.645079] kmem_cache_alloc_trace+0x117/0x2e0 [ 653.649737] alloc_disk_node+0x54/0x3a0 [ 653.653698] alloc_disk+0x18/0x20 [ 653.657148] loop_add+0x368/0x7a0 [ 653.660593] loop_probe+0x14f/0x180 [ 653.664215] kobj_lookup+0x223/0x410 [ 653.667922] get_gendisk+0x39/0x2d0 [ 653.671551] __blkdev_get+0x351/0xd60 [ 653.675338] blkdev_get+0x2da/0x920 [ 653.678962] blkdev_open+0x1a5/0x250 [ 653.682752] do_dentry_open+0x3ef/0xc90 [ 653.688017] vfs_open+0x11c/0x210 [ 653.691461] path_openat+0x542/0x2790 [ 653.695262] do_filp_open+0x197/0x270 [ 653.699056] do_sys_open+0x30d/0x5c0 [ 653.702767] SyS_open+0x2d/0x40 [ 653.706033] do_syscall_64+0x19f/0x550 [ 653.710001] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 653.715095] [ 653.716716] Freed by task 26922: [ 653.720078] save_stack_trace+0x16/0x20 [ 653.724067] kasan_slab_free+0xac/0x190 [ 653.728034] kfree+0xfb/0x310 [ 653.731131] disk_release+0x259/0x330 [ 653.734919] device_release+0x7e/0x220 [ 653.738883] kobject_put+0x148/0x250 [ 653.742775] put_disk+0x23/0x30 [ 653.746046] __blkdev_get+0x616/0xd60 [ 653.750614] blkdev_get+0x2da/0x920 [ 653.754928] blkdev_open+0x1a5/0x250 [ 653.758632] do_dentry_open+0x3ef/0xc90 [ 653.762607] vfs_open+0x11c/0x210 [ 653.766051] path_openat+0x542/0x2790 [ 653.769843] do_filp_open+0x197/0x270 [ 653.773649] do_sys_open+0x30d/0x5c0 [ 653.777365] SyS_open+0x2d/0x40 [ 653.780637] do_syscall_64+0x19f/0x550 [ 653.784515] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 653.789615] [ 653.791237] The buggy address belongs to the object at ffff8801d6399100 [ 653.791237] which belongs to the cache kmalloc-2048 of size 2048 [ 653.804057] The buggy address is located 1376 bytes inside of [ 653.804057] 2048-byte region [ffff8801d6399100, ffff8801d6399900) [ 653.816092] The buggy address belongs to the page: [ 653.821074] page:ffffea000758e600 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 653.831308] flags: 0x4000000000004080(slab|head) [ 653.836052] page dumped because: kasan: bad access detected [ 653.841763] [ 653.843378] Memory state around the buggy address: [ 653.848302] ffff8801d6399500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.855669] ffff8801d6399580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 09:13:11 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x2, 0x105082) 09:13:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, &(0x7f0000000000)=0x100000, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) r16 = inotify_init() r17 = dup3(r16, r12, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r18 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r11) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r19 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r19, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r21 = ioctl$LOOP_CTL_GET_FREE(r20, 0x4c82) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) ioctl$LOOP_CTL_REMOVE(r20, 0x4c81, r21) r22 = dup3(r20, r20, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r22, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) 09:13:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)='\x10[nodev]\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x81003) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) sendfile(r0, r2, &(0x7f0000000000), 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 09:13:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40, 0x0) ioctl$FITRIM(r1, 0xc0184908, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xffff}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/232) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x420002, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = dup3(r6, r6, 0x80000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) faccessat(r8, &(0x7f0000000480)='./file0\x00', 0x4, 0x600) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r9 = dup3(r4, r4, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000280)={0x7f, 0xa07, 0xb0, &(0x7f00000001c0)="a0060ac0e01159b0f7616eaaac7691bc7b9fee117a89027005bd8b84fa113a812d39a6a08eb6f85baaab7e62d4294d2f81e8d7ec9948b7e634ecb2a6b91e3d1d4cb6facd90673c1f5993456bc7173a6cdb14bdf7347cc3ae9cdfff507b28d543e9a81a4c01d4121d13f52adf3398bb0ec78ef88d045a1dc4904674397cbcf9ff2c21990e1a5436cb7e9f26d68f06e85bf13e6939d4747205240a5ba07ea1ded5e2d41cbd6639aefbf83b77f21b4da163"}) sendfile(r2, r3, 0x0, 0x100000008001) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = socket$packet(0x11, 0x2, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000140)=r15, 0x4) inotify_init() setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) r16 = dup3(r10, r10, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r16, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@dev, @in=@broadcast}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xfffffffffffffe25) sendto(r0, &(0x7f00000000c0), 0xfffffffffffffd67, 0x800, 0x0, 0x0) [ 653.863165] >ffff8801d6399600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.870518] ^ [ 653.877001] ffff8801d6399680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.884364] ffff8801d6399700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 653.891714] ================================================================== [ 653.899059] Disabling lock debugging due to kernel taint 09:13:11 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x8000, 0x4, 0x800, 0x2, 0x7}) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) fsync(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5f63ce0fe30301b5}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000001900040025bd7000fddbdf250000000004000100780001001000070000000800030006000000000010001a0000000800030006000000000010001f000000080001006e61740000001400180000000c0001006d69727265640000001a10000b000000080003000100000000001000190000000800010078740000000010001a00000008000300000400000000"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x40) 09:13:11 executing program 2: seccomp(0x0, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000001200)={0xeb, {{0xa, 0x4e22, 0x4, @local, 0xfff}}, {{0xa, 0x4e23, 0x80000001, @rand_addr="695c505db39bacdd10c42ec1bfb7a4b7", 0x1}}}, 0x108) ioctl$LOOP_CLR_FD(r2, 0x4c01) flistxattr(r2, &(0x7f0000000200)=""/4096, 0x1000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000540)="240000005a001f00ff03f4f9002304000a04f5fe07000196e900020100020800038001c9", 0x24) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x588db93b9f7b1667) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf41}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r5 = socket$inet6(0xa, 0x6, 0xff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @mcast1, 0x20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={@remote, 0x1e, r7}) 09:13:11 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000008cc0)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x6, 0x8}) [ 653.962980] Kernel panic - not syncing: panic_on_warn set ... [ 653.962980] [ 653.970407] CPU: 0 PID: 26922 Comm: blkid Tainted: G B 4.9.141+ #1 [ 653.977849] ffff8801a1937658 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 653.985973] 0000000000000000 0000000000000000 0000000000000000 ffff8801a1937718 [ 653.994053] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 654.002122] Call Trace: [ 654.004710] [] dump_stack+0xc1/0x128 09:13:11 executing program 2: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) seccomp(0x0, 0x1, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) [ 654.010075] [] panic+0x1bf/0x39f [ 654.010573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 654.023573] [] ? add_taint.cold.5+0x16/0x16 [ 654.028648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 654.038036] [] ? ___preempt_schedule+0x16/0x18 [ 654.044269] [] kasan_end_report+0x47/0x4f [ 654.050068] [] kasan_report.cold.6+0x76/0x2fe [ 654.056217] [] ? disk_unblock_events+0x51/0x60 [ 654.062445] [] __asan_report_load8_noabort+0x14/0x20 [ 654.069200] [] disk_unblock_events+0x51/0x60 [ 654.077450] [] __blkdev_get+0x6b6/0xd60 [ 654.083168] [] ? __blkdev_put+0x840/0x840 [ 654.088959] [] ? fsnotify+0x114/0x1100 [ 654.094493] [] blkdev_get+0x2da/0x920 [ 654.100136] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 654.106892] [] ? bd_may_claim+0xd0/0xd0 [ 654.112600] [] ? bd_acquire+0x27/0x250 [ 654.118137] [] ? bd_acquire+0x88/0x250 [ 654.124624] [] ? _raw_spin_unlock+0x2c/0x50 [ 654.130590] [] blkdev_open+0x1a5/0x250 [ 654.136121] [] do_dentry_open+0x3ef/0xc90 [ 654.142264] [] ? blkdev_get_by_dev+0x70/0x70 [ 654.148320] [] vfs_open+0x11c/0x210 [ 654.153594] [] ? may_open.isra.20+0x14f/0x2a0 [ 654.159750] [] path_openat+0x542/0x2790 [ 654.165375] [] ? path_mountpoint+0x6c0/0x6c0 [ 654.171454] [] ? trace_hardirqs_on+0x10/0x10 [ 654.178375] [] ? expand_files.part.3+0x3a9/0x6d0 [ 654.184778] [] do_filp_open+0x197/0x270 [ 654.190404] [] ? may_open_dev+0xe0/0xe0 [ 654.196027] [] ? _raw_spin_unlock+0x2c/0x50 [ 654.201995] [] ? __alloc_fd+0x1d7/0x4a0 [ 654.207629] [] do_sys_open+0x30d/0x5c0 [ 654.213164] [] ? filp_open+0x70/0x70 [ 654.218543] [] ? up_read+0x1a/0x40 [ 654.223744] [] SyS_open+0x2d/0x40 [ 654.228853] [] ? do_sys_open+0x5c0/0x5c0 [ 654.235546] [] do_syscall_64+0x19f/0x550 [ 654.241263] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 654.248992] Kernel Offset: disabled [ 654.252731] Rebooting in 86400 seconds..