ffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r10) r11 = signalfd4(r3, &(0x7f0000000040)={0xff}, 0x8, 0x140000) preadv(r11, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/237, 0xed}, {&(0x7f0000000180)=""/208, 0xd0}], 0x3, 0x0) r12 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='user.syz\x00', &(0x7f0000000340)='net/ptype\x00', 0xa, 0x0) setsockopt$packet_tx_ring(r12, 0x107, 0xd, 0x0, 0x0) write$binfmt_elf64(r12, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x8, 0x1, 0xc5, 0x2, 0x6, 0x5a, 0x334, 0x40, 0x125, 0x9, 0xff, 0x38, 0x1, 0x3f, 0x9, 0x62}, [{0x60000000, 0x100, 0x81, 0x9ef, 0x4, 0x5, 0x278d, 0x5}], "a07228982ead37a3929a2ee43a9fd4f8a1025c812acc491b4bbf46ff958a25467b442b4af709596f44382c2d9b4af216a40d2fb0f90a35805160bc3c67195d3a36d8951416e83d6deef5f4dda084b7a87c4a5d4872efbd79bac1391f108a6247b2bd9e2554f2f847e7422a069c84094bd4b2bb178a5377d39855424a178bfc61238b13322c268b7d16608b594b908a001098ddd9aecff55c4cc731354b9c3d402bd7644a817a36aeea9a27ebd967c869d2acacc1d6a7eaadd683f8cb1539bd4e0ce389eb0564b038cd5108f133a489572d7a3383540ba740e5a34023c11fcb84bbff3488dc4e", [[], [], []]}, 0x45e) 08:06:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f00000000c0), 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:06:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x2000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='eth0system%self$\'vboxnet0\x00', 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000340)='+*ppp1^self\x00') r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000180)=0xe8) r5 = getgid() r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r6, &(0x7f0000000700), 0x31f, 0x10400003) write$UHID_DESTROY(r6, &(0x7f0000000240), 0x4) keyctl$chown(0x4, r3, r4, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:06:55 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket(0x0, 0x80000, 0x5) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x7) 08:06:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x100101, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = dup3(r0, r1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0xfffffe10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 08:06:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 08:06:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="92e43989eb1f0741e8b393fa82ca40f1be8ce6422da9f80f7ff5adc7f0e56814db332a4b1c8ecb442f4b90b2176be0dae4d3cf431de33b47b6501ab7808188dbb6def77db54cbf1d6b9660874d00e452e784ff4fa81da0aca78dfd6a68b27297e55297b2e4f19c25d50b743c91f16440802adf63ce64d927c5020b0fd07de2fdea3ebc7c64a28ca72842328f07434d8d1767ef97cb7f2f57d313b061bea478200aa5", 0xa2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20001, 0x40) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x100, 0x0) r14 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_ADD(r13, 0x4c80, r14) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r14) 08:06:55 executing program 1: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0xc, 0x4) syz_open_dev$loop(&(0x7f0000000000)='/$ev/loop#\x00', 0x4000001, 0x0) 08:06:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0xa6, 0x40, 0x4, 0xae, 0xffffffffffffffff, 0x400, [], r3, r4, 0x2}, 0x3c) signalfd(r0, &(0x7f0000000000)={0x100}, 0x8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:06:56 executing program 5: unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) getitimer(0x2, &(0x7f0000000280)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x101000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0x6, 0x1f}, &(0x7f0000000100)=0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x3}}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:06:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="92e43989eb1f0741e8b393fa82ca40f1be8ce6422da9f80f7ff5adc7f0e56814db332a4b1c8ecb442f4b90b2176be0dae4d3cf431de33b47b6501ab7808188dbb6def77db54cbf1d6b9660874d00e452e784ff4fa81da0aca78dfd6a68b27297e55297b2e4f19c25d50b743c91f16440802adf63ce64d927c5020b0fd07de2fdea3ebc7c64a28ca72842328f07434d8d1767ef97cb7f2f57d313b061bea478200aa5", 0xa2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20001, 0x40) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x100, 0x0) r14 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_ADD(r13, 0x4c80, r14) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r14) 08:06:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 08:06:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x80}, {r1, 0x20}, {r3, 0x100}, {r4, 0x4300}, {r5, 0x4}, {r6, 0x10}, {r7, 0x2008}, {r8, 0x1500}, {r9, 0x9102}], 0x9, &(0x7f00000001c0)={r11, r12+10000000}, &(0x7f0000000200)={0x3f}, 0x8) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r13, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000000)={0x0, 0x6, 0x7f, 0x1, 0x9, 0x8, 0x227, 0x1, 0xad4, 0x1a, 0x3, 0x80000000}) 08:06:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:56 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000000d6bd, 0x612903) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:06:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0xcf, 0x0, 0x0) 08:06:56 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x32da, 0x200) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004600)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000004700)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004740)={@mcast1, 0x63, r2}) 08:06:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df8d8e1e0000000000000000000000000000000000000000000000000000000000000000000000000002461bc8d0b99be600000000000000000015000000010000000100000002004e24ffffffff0000000000000079b289940000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000248c7820b81251a3d300"], 0x10c) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) 08:06:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8180, 0x7) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:06:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:56 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) 08:06:56 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e21, @rand_addr=0x7}}) 08:06:56 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x800) 08:06:56 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0xa62}, 0x28, 0x3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x0, 0x0, 0xc, 0x7fffffff, 0x8}, &(0x7f0000000040)=0x20) 08:06:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) 08:06:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x100101, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = dup3(r0, r1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0xfffffe10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 08:06:56 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x6, 0x0, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x401, 0x8001, 0x3, 0x401, 0x6, 0x1}) 08:06:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) ftruncate(r0, 0x400) 08:06:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x100101, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = dup3(r0, r1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0xfffffe10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 08:06:56 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/\xa1\x05\x00\x00\xe7\xff\xff\xff\xff\xff\x87\xff\x00\x00 \x00', 0x400, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/l\x00\x00p\x1fQ\xc2X\xec\t\xc6\xf5\xf8', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, 0x0, 0x0) preadv(r7, &(0x7f00000001c0), 0x0, 0x10400003) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TIOCLINUX6(r10, 0x541c, &(0x7f0000000000)) 08:06:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r4 = fcntl$dupfd(r0, 0x364f493cfd2236cf, r1) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) 08:06:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x100101, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = dup3(r0, r1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0xfffffe10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 08:06:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/\x05\x00\x00\x00\x00\x00\x00\x00=\xf4\xf3l\x00', 0x800, 0x0) r1 = dup2(r0, 0xffffffffffffffff) io_setup(0x14, &(0x7f0000000100)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) write$P9_RLERRORu(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1f0000000701202b002f6465a99a5e4ae4dad3fc9c2beeb4ccc0949a582f05000000000092523df4f26c0001000000f9fd6e2da221904ee3f3e6d094c7f9dee29766e1c1cfb53330df6b82898f0e4c3fdc34d749298e21258c10386c284d58a9323cda06aa742333caa981fd024876b5b370bdd11ecff5be58a6d088098d9fe86d48fb6b344908e991b30e552696cb2e4835660000000000"], 0x1f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240800002de072bc000000000000008000000000", @ANYRES32=r9, @ANYBLOB="0000000000000c8fb00000001000"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)={@loopback, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="6d928f137abd5a657eec76", 0xb}, {&(0x7f0000000280)="fa382ea8cb41cee53c0373ad8fc7ddc955698926e9aa77ec404d9bf13619685c5f31c5e8209084482e5b8c73b126598962f4faebe99fdea0c163d4059f475695665d4d0df65b6916c54fddd2ad575dfb5c2b55d0119bde4daf8f430335eb6a69f668a8883dde67030786b7e63b3ac6a6db2dfc2b16a30cd77b5b84e24c193da4d13e270b76268c55144e736605fdab836fd9528aed2d982a7840f645159dda11b63845e4b3da7493bf207e272ccdaabe511b8fd532102c47377da9b90a41cdbc6f452bced1d793b97671817d29a6984f973e31a15673ade34102b14300fc45417fbc3060165a56", 0xe7}, {&(0x7f0000000400)="96e9d0d99134ca35ed6bad755272a115edd46a0467ee3ac7a8d70a1de325e16f17e58c43f86aec3b34f8fc19540d4c6a43720281c3d29b0abb664be316d76af234cc55aa83", 0x45}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="afdf7b720cb437804798de465007abe593884747ccfda16b5c1890e657088f09702e8e5515b660eba0199d5ded3c15416abd81f80e7c9e38988ddba5b9ebe37f89d9df29d08179d6fb1c0f465ad3995ee63009d7df39a71ab157a66fb86806025b80e02bba396c33714345675901c14845a3aee233c149eeb8f0e5bb93c3a372c38e263a291de530292e14e1183aa590ff2b37883a", 0x95}, {&(0x7f0000000580)="a68e98e791f43a936b8b18103ea56f403491f866811345c5ed9250634db3abd5c6f62f9bf251fbd86b9bbb8111d01c5355e15c9aedc1ad7fd5ef69d68d6e9506a5f9eabe907298a06b12961ed1357f81087b7a6e66d7d17273b1a5500c96fe0c34d0ddc7c755c9c4a6b25efadf66e5cf30a837dae8277598a11d720a86867292e6c584544532efa61ec1311288", 0x8d}, {&(0x7f0000000640)="6ecfc51fae34d2e572fa5577008ca2a0383b0bd4765698757230a5a28992c5cd9425008dcc1274467384c4c9c8ae213b39cf22ae8eb16800bc333eff33494f6c698e2954c61663622db050f2c799871cc2b4477a52c36bb7b1ee2bebc19bc5517470d720f5596a7ea0bfba3ddd35f5608bae1061fa56df76ce2636adafc6c33ddc1af59de53c77aa6dbe16053dd6d0e7802bd60d035c25fbfe3276043dc2476af6441d5c689c0f4cf4fa70ed913e1853d0ff9a67dbbb7d1dc400be3aae20270b772676146428c12fdf9cb4ed927f19c084babf7a6bab19512ea311bcaa", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="a1598a93f9931d0b7032d887e41d7ca2de5015b05f49f57c2869ac5301fdab11983e9ddbe252b92d2cdda82f48b142c8a171066def2d60a05b16630c936c08617ffa6f7e5a5d0c10b80f4d6378b39f9cc6bba82426eef6d07e002f68d3181672b63a96fc89037a0afcd4b4ab85fa75815c561fd491bc0665a827842836601235b76705d67433e639685fd45dde5015900bd9d8f45780e88abe570cf07d9af46a3493b4c5a7d8fd16e756e1749582", 0xae}, {&(0x7f0000000840)="eb3fd22a4ee9", 0x6}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast1, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @empty}}}], 0x40}}], 0x3, 0x28005) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) r13 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r13) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r14, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$IOC_PR_RESERVE(r14, 0x401070c9, &(0x7f0000000180)={0x3, 0x400, 0x1}) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) 08:06:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) socketpair(0x5, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r0, 0x40049409, r1) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:auditd_var_run_t:s0\x00', 0x26, 0x3) 08:06:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f00000000c0), 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:06:57 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x440082, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)="f13d7b78ddac1fa1232a9d2943166d3f19965b0e47ff6d19934f8c36cebaee9d5eadf3eea0feccd398ac95c5f76d99491b39c97ee1077811cc26c646fcea63d5252f445ddb8cfdae8a2e20e5d094897674f1e51c2514ef1da90a3cfce43714b3dbb85b2e4a881b341f691c8ca952112c132358f36674d4d0a3339a5bb9e83d85ae18cd0ff1ee62a8f4f2245b6fa93ffae36b6e92bab2b30cfa17e4e1e447422c88ad6bad0fedc51322fdad"}, 0x20) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) 08:06:57 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="92e43989eb1f0741e8b393fa82ca40f1be8ce6422da9f80f7ff5adc7f0e56814db332a4b1c8ecb442f4b90b2176be0dae4d3cf431de33b47b6501ab7808188dbb6def77db54cbf1d6b9660874d00e452e784ff4fa81da0aca78dfd6a68b27297e55297b2e4f19c25d50b743c91f16440802adf63ce64d927c5020b0fd07de2fdea3ebc7c64a28ca72842328f07434d8d1767ef97cb7f2f57d313b061bea478200aa5", 0xa2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20001, 0x40) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r8) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x100, 0x0) r14 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_ADD(r13, 0x4c80, r14) ioctl$LOOP_CTL_REMOVE(r13, 0x4c81, r14) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r14) [ 166.022881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57389 sclass=netlink_route_socket pig=12690 comm=syz-executor.3 08:06:57 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000040)={0x7ae, 0x3, 0x40, 0xfff, 0xdc36, 0x7f1dd7bc, 0x6}) 08:06:57 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r1, 0x900, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c47}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44011) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x16c, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3791cba2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x400000000000001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fd}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_emit_ethernet(0x133c, &(0x7f00000005c0)={@empty, @empty, [{[{0x9100, 0x6, 0x5, 0x1}], {0x8100, 0x1f, 0x5, 0x1}}], {@ipv6={0x86dd, {0x0, 0x6, "31a94b", 0x12fe, 0xab, 0x7fff, @remote, @loopback, {[@hopopts={0x3c, 0x13, [], [@generic={0x6, 0x97, "c6b701d348849dbafb36d4c403e7a8a9877cc58aa6066d761c11f8d3234fb4796daf624063103a00123b6170a3896c0e9492bc95e481a7395925dbdb3463d99f2ac5d8c3043a26a3a7343ee15aa5d2f506228b6d4fe4f8df49ffc007f3eff40d17bf916b29bff149fb5b10d66978e0e32557ba4155a0530062dc2247152f8b5b2aea7bd6f204bff8a131b48df8a018a4d80d5d24663d81"}]}, @hopopts={0x2, 0x8, [], [@enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fff}, @calipso={0x7, 0x18, {0xffff, 0x4, 0x6, 0xda, [0x5adc00000, 0x20]}}, @enc_lim={0x4, 0x1, 0x7b5e938b}, @pad1, @ra={0x5, 0x2, 0x834}, @hao={0xc9, 0x10, @remote}]}, @dstopts={0x32, 0xf, [], [@padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x10, {0x7, 0x2, 0x6, 0x8, [0x1]}}, @jumbo={0xc2, 0x4, 0x10001}, @generic={0x6, 0x57, "258efd19dfdab74cf3c3c97fe2b1df8afe16180dec1d2ca822197b0ad20437a31efbb936f2e12340ba27447e48b7a5870d7877d36120dc417ec32d4af3bf8c75cefa452589008f5d2ee2276acd5c7728aab893fedf4bc0"}, @jumbo={0xc2, 0x4, 0xe6}]}, @srh={0x84, 0x2, 0x4, 0x1, 0xffffffffffffffff, 0x50, 0x9, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @hopopts={0x22, 0x0, [], [@jumbo={0xc2, 0x4, 0x52}]}, @srh={0x2c, 0x14, 0x4, 0xa, 0x2, 0x0, 0x6, [@dev={0xfe, 0x80, [], 0xf}, @mcast1, @mcast2, @loopback, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, @loopback, @rand_addr="59fe0365260869e7201105c4e63233e1", @remote, @ipv4={[], [], @remote}, @loopback]}, @dstopts={0x0, 0x20a, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x100000001, [0x7ff, 0x0, 0x4, 0x7]}}, @enc_lim={0x4, 0x1, 0xcbc}, @pad1, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x27d9}, @pad1, @generic={0x1000, 0x1000, "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"}, @ra={0x5, 0x2, 0x1}]}], @dccp={{0x4e21, 0x4e24, 0x4, 0x1, 0x10000, 0x0, 0x0, 0x81aac07019dfa72e, 0xc0, "11df6a", 0x14b3, "563cbf"}, "68f92c5f070d4f8affab64b52cda66e3c7cce2d5838f721a8d8d4c6ee4e50b684c4e1c2f3f6b2ed8e7a96340ad6194bf72992d69f7ead6e54d61549bada2"}}}}}}, 0x0) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:06:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) 08:06:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000000), &(0x7f0000000040)) 08:06:57 executing program 4: syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x1) chmod(&(0x7f0000000000)='./file0\x00', 0x2f274eeb4f79833f) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:58 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x8001, 0x0) 08:06:58 executing program 5: r0 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='eth0system%self$\'vboxnet0\x00', 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000340)='+*ppp1^self\x00') keyctl$clear(0x7, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:06:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r4) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f00000000c0)=0x21f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 08:06:58 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x20000000001, 0x0) memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) tkill(r1, 0x4) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000000)='maps\x00') 08:06:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/\x05\x00\x00\x00\x00\x00\x00\x00=\xf4\xf3l\x00', 0x800, 0x0) r1 = dup2(r0, 0xffffffffffffffff) io_setup(0x14, &(0x7f0000000100)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) write$P9_RLERRORu(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1f0000000701202b002f6465a99a5e4ae4dad3fc9c2beeb4ccc0949a582f05000000000092523df4f26c0001000000f9fd6e2da221904ee3f3e6d094c7f9dee29766e1c1cfb53330df6b82898f0e4c3fdc34d749298e21258c10386c284d58a9323cda06aa742333caa981fd024876b5b370bdd11ecff5be58a6d088098d9fe86d48fb6b344908e991b30e552696cb2e4835660000000000"], 0x1f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240800002de072bc000000000000008000000000", @ANYRES32=r9, @ANYBLOB="0000000000000c8fb00000001000"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)={@loopback, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="6d928f137abd5a657eec76", 0xb}, {&(0x7f0000000280)="fa382ea8cb41cee53c0373ad8fc7ddc955698926e9aa77ec404d9bf13619685c5f31c5e8209084482e5b8c73b126598962f4faebe99fdea0c163d4059f475695665d4d0df65b6916c54fddd2ad575dfb5c2b55d0119bde4daf8f430335eb6a69f668a8883dde67030786b7e63b3ac6a6db2dfc2b16a30cd77b5b84e24c193da4d13e270b76268c55144e736605fdab836fd9528aed2d982a7840f645159dda11b63845e4b3da7493bf207e272ccdaabe511b8fd532102c47377da9b90a41cdbc6f452bced1d793b97671817d29a6984f973e31a15673ade34102b14300fc45417fbc3060165a56", 0xe7}, {&(0x7f0000000400)="96e9d0d99134ca35ed6bad755272a115edd46a0467ee3ac7a8d70a1de325e16f17e58c43f86aec3b34f8fc19540d4c6a43720281c3d29b0abb664be316d76af234cc55aa83", 0x45}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="afdf7b720cb437804798de465007abe593884747ccfda16b5c1890e657088f09702e8e5515b660eba0199d5ded3c15416abd81f80e7c9e38988ddba5b9ebe37f89d9df29d08179d6fb1c0f465ad3995ee63009d7df39a71ab157a66fb86806025b80e02bba396c33714345675901c14845a3aee233c149eeb8f0e5bb93c3a372c38e263a291de530292e14e1183aa590ff2b37883a", 0x95}, {&(0x7f0000000580)="a68e98e791f43a936b8b18103ea56f403491f866811345c5ed9250634db3abd5c6f62f9bf251fbd86b9bbb8111d01c5355e15c9aedc1ad7fd5ef69d68d6e9506a5f9eabe907298a06b12961ed1357f81087b7a6e66d7d17273b1a5500c96fe0c34d0ddc7c755c9c4a6b25efadf66e5cf30a837dae8277598a11d720a86867292e6c584544532efa61ec1311288", 0x8d}, {&(0x7f0000000640)="6ecfc51fae34d2e572fa5577008ca2a0383b0bd4765698757230a5a28992c5cd9425008dcc1274467384c4c9c8ae213b39cf22ae8eb16800bc333eff33494f6c698e2954c61663622db050f2c799871cc2b4477a52c36bb7b1ee2bebc19bc5517470d720f5596a7ea0bfba3ddd35f5608bae1061fa56df76ce2636adafc6c33ddc1af59de53c77aa6dbe16053dd6d0e7802bd60d035c25fbfe3276043dc2476af6441d5c689c0f4cf4fa70ed913e1853d0ff9a67dbbb7d1dc400be3aae20270b772676146428c12fdf9cb4ed927f19c084babf7a6bab19512ea311bcaa", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="a1598a93f9931d0b7032d887e41d7ca2de5015b05f49f57c2869ac5301fdab11983e9ddbe252b92d2cdda82f48b142c8a171066def2d60a05b16630c936c08617ffa6f7e5a5d0c10b80f4d6378b39f9cc6bba82426eef6d07e002f68d3181672b63a96fc89037a0afcd4b4ab85fa75815c561fd491bc0665a827842836601235b76705d67433e639685fd45dde5015900bd9d8f45780e88abe570cf07d9af46a3493b4c5a7d8fd16e756e1749582", 0xae}, {&(0x7f0000000840)="eb3fd22a4ee9", 0x6}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast1, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @empty}}}], 0x40}}], 0x3, 0x28005) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) r13 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r13) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r14, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$IOC_PR_RESERVE(r14, 0x401070c9, &(0x7f0000000180)={0x3, 0x400, 0x1}) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) 08:06:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x1a, 0x3, 0x9, 0x5, 0x6, 0x5, 0x6d, 0xffffffffffffffff}}) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:06:58 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) socket$unix(0x1, 0x2, 0x0) 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 166.869498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57389 sclass=netlink_route_socket pig=12771 comm=syz-executor.2 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:58 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x8, 0x10001}) 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x800) ioctl$RTC_PIE_OFF(r2, 0x7006) pipe2(&(0x7f0000000040), 0x84000) 08:06:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/\x05\x00\x00\x00\x00\x00\x00\x00=\xf4\xf3l\x00', 0x800, 0x0) r1 = dup2(r0, 0xffffffffffffffff) io_setup(0x14, &(0x7f0000000100)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) write$P9_RLERRORu(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1f0000000701202b002f6465a99a5e4ae4dad3fc9c2beeb4ccc0949a582f05000000000092523df4f26c0001000000f9fd6e2da221904ee3f3e6d094c7f9dee29766e1c1cfb53330df6b82898f0e4c3fdc34d749298e21258c10386c284d58a9323cda06aa742333caa981fd024876b5b370bdd11ecff5be58a6d088098d9fe86d48fb6b344908e991b30e552696cb2e4835660000000000"], 0x1f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240800002de072bc000000000000008000000000", @ANYRES32=r9, @ANYBLOB="0000000000000c8fb00000001000"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)={@loopback, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="6d928f137abd5a657eec76", 0xb}, {&(0x7f0000000280)="fa382ea8cb41cee53c0373ad8fc7ddc955698926e9aa77ec404d9bf13619685c5f31c5e8209084482e5b8c73b126598962f4faebe99fdea0c163d4059f475695665d4d0df65b6916c54fddd2ad575dfb5c2b55d0119bde4daf8f430335eb6a69f668a8883dde67030786b7e63b3ac6a6db2dfc2b16a30cd77b5b84e24c193da4d13e270b76268c55144e736605fdab836fd9528aed2d982a7840f645159dda11b63845e4b3da7493bf207e272ccdaabe511b8fd532102c47377da9b90a41cdbc6f452bced1d793b97671817d29a6984f973e31a15673ade34102b14300fc45417fbc3060165a56", 0xe7}, {&(0x7f0000000400)="96e9d0d99134ca35ed6bad755272a115edd46a0467ee3ac7a8d70a1de325e16f17e58c43f86aec3b34f8fc19540d4c6a43720281c3d29b0abb664be316d76af234cc55aa83", 0x45}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="afdf7b720cb437804798de465007abe593884747ccfda16b5c1890e657088f09702e8e5515b660eba0199d5ded3c15416abd81f80e7c9e38988ddba5b9ebe37f89d9df29d08179d6fb1c0f465ad3995ee63009d7df39a71ab157a66fb86806025b80e02bba396c33714345675901c14845a3aee233c149eeb8f0e5bb93c3a372c38e263a291de530292e14e1183aa590ff2b37883a", 0x95}, {&(0x7f0000000580)="a68e98e791f43a936b8b18103ea56f403491f866811345c5ed9250634db3abd5c6f62f9bf251fbd86b9bbb8111d01c5355e15c9aedc1ad7fd5ef69d68d6e9506a5f9eabe907298a06b12961ed1357f81087b7a6e66d7d17273b1a5500c96fe0c34d0ddc7c755c9c4a6b25efadf66e5cf30a837dae8277598a11d720a86867292e6c584544532efa61ec1311288", 0x8d}, {&(0x7f0000000640)="6ecfc51fae34d2e572fa5577008ca2a0383b0bd4765698757230a5a28992c5cd9425008dcc1274467384c4c9c8ae213b39cf22ae8eb16800bc333eff33494f6c698e2954c61663622db050f2c799871cc2b4477a52c36bb7b1ee2bebc19bc5517470d720f5596a7ea0bfba3ddd35f5608bae1061fa56df76ce2636adafc6c33ddc1af59de53c77aa6dbe16053dd6d0e7802bd60d035c25fbfe3276043dc2476af6441d5c689c0f4cf4fa70ed913e1853d0ff9a67dbbb7d1dc400be3aae20270b772676146428c12fdf9cb4ed927f19c084babf7a6bab19512ea311bcaa", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="a1598a93f9931d0b7032d887e41d7ca2de5015b05f49f57c2869ac5301fdab11983e9ddbe252b92d2cdda82f48b142c8a171066def2d60a05b16630c936c08617ffa6f7e5a5d0c10b80f4d6378b39f9cc6bba82426eef6d07e002f68d3181672b63a96fc89037a0afcd4b4ab85fa75815c561fd491bc0665a827842836601235b76705d67433e639685fd45dde5015900bd9d8f45780e88abe570cf07d9af46a3493b4c5a7d8fd16e756e1749582", 0xae}, {&(0x7f0000000840)="eb3fd22a4ee9", 0x6}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast1, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @empty}}}], 0x40}}], 0x3, 0x28005) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) r13 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r13) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r14, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$IOC_PR_RESERVE(r14, 0x401070c9, &(0x7f0000000180)={0x3, 0x400, 0x1}) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) 08:06:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) [ 167.124780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57389 sclass=netlink_route_socket pig=12816 comm=syz-executor.2 08:06:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:06:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCEXCL(r3, 0x540c) openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x129b07d7ea558da0}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="a226814fbed5673a505ed80ee82bae45268ed72e010c763d1a2cd26198a9633505c2ce8682b0f3e940c4005a51dd49ec793fbacbf7e877db9c32351d950f9026e94f465b7cef4862875255600458ab16b36a116be175fa711e4e7a5776af46cafcc133d06d1ebf5c5be502cbc50ccbbe096fe62affd96415798a"], 0x3}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffffffffffe2, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfa, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DEST_ATTR_INACT_CONNS={0xfffffffffffffdf4, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x48084) 08:06:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/de\x9b/loop-contrh\x00', 0xa0000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:59 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/\x05\x00\x00\x00\x00\x00\x00\x00=\xf4\xf3l\x00', 0x800, 0x0) r1 = dup2(r0, 0xffffffffffffffff) io_setup(0x14, &(0x7f0000000100)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) write$P9_RLERRORu(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="1f0000000701202b002f6465a99a5e4ae4dad3fc9c2beeb4ccc0949a582f05000000000092523df4f26c0001000000f9fd6e2da221904ee3f3e6d094c7f9dee29766e1c1cfb53330df6b82898f0e4c3fdc34d749298e21258c10386c284d58a9323cda06aa742333caa981fd024876b5b370bdd11ecff5be58a6d088098d9fe86d48fb6b344908e991b30e552696cb2e4835660000000000"], 0x1f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="240800002de072bc000000000000008000000000", @ANYRES32=r9, @ANYBLOB="0000000000000c8fb00000001000"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)={@loopback, 0x0}, &(0x7f0000000900)=0x14) sendmmsg$inet(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="6d928f137abd5a657eec76", 0xb}, {&(0x7f0000000280)="fa382ea8cb41cee53c0373ad8fc7ddc955698926e9aa77ec404d9bf13619685c5f31c5e8209084482e5b8c73b126598962f4faebe99fdea0c163d4059f475695665d4d0df65b6916c54fddd2ad575dfb5c2b55d0119bde4daf8f430335eb6a69f668a8883dde67030786b7e63b3ac6a6db2dfc2b16a30cd77b5b84e24c193da4d13e270b76268c55144e736605fdab836fd9528aed2d982a7840f645159dda11b63845e4b3da7493bf207e272ccdaabe511b8fd532102c47377da9b90a41cdbc6f452bced1d793b97671817d29a6984f973e31a15673ade34102b14300fc45417fbc3060165a56", 0xe7}, {&(0x7f0000000400)="96e9d0d99134ca35ed6bad755272a115edd46a0467ee3ac7a8d70a1de325e16f17e58c43f86aec3b34f8fc19540d4c6a43720281c3d29b0abb664be316d76af234cc55aa83", 0x45}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="afdf7b720cb437804798de465007abe593884747ccfda16b5c1890e657088f09702e8e5515b660eba0199d5ded3c15416abd81f80e7c9e38988ddba5b9ebe37f89d9df29d08179d6fb1c0f465ad3995ee63009d7df39a71ab157a66fb86806025b80e02bba396c33714345675901c14845a3aee233c149eeb8f0e5bb93c3a372c38e263a291de530292e14e1183aa590ff2b37883a", 0x95}, {&(0x7f0000000580)="a68e98e791f43a936b8b18103ea56f403491f866811345c5ed9250634db3abd5c6f62f9bf251fbd86b9bbb8111d01c5355e15c9aedc1ad7fd5ef69d68d6e9506a5f9eabe907298a06b12961ed1357f81087b7a6e66d7d17273b1a5500c96fe0c34d0ddc7c755c9c4a6b25efadf66e5cf30a837dae8277598a11d720a86867292e6c584544532efa61ec1311288", 0x8d}, {&(0x7f0000000640)="6ecfc51fae34d2e572fa5577008ca2a0383b0bd4765698757230a5a28992c5cd9425008dcc1274467384c4c9c8ae213b39cf22ae8eb16800bc333eff33494f6c698e2954c61663622db050f2c799871cc2b4477a52c36bb7b1ee2bebc19bc5517470d720f5596a7ea0bfba3ddd35f5608bae1061fa56df76ce2636adafc6c33ddc1af59de53c77aa6dbe16053dd6d0e7802bd60d035c25fbfe3276043dc2476af6441d5c689c0f4cf4fa70ed913e1853d0ff9a67dbbb7d1dc400be3aae20270b772676146428c12fdf9cb4ed927f19c084babf7a6bab19512ea311bcaa", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="a1598a93f9931d0b7032d887e41d7ca2de5015b05f49f57c2869ac5301fdab11983e9ddbe252b92d2cdda82f48b142c8a171066def2d60a05b16630c936c08617ffa6f7e5a5d0c10b80f4d6378b39f9cc6bba82426eef6d07e002f68d3181672b63a96fc89037a0afcd4b4ab85fa75815c561fd491bc0665a827842836601235b76705d67433e639685fd45dde5015900bd9d8f45780e88abe570cf07d9af46a3493b4c5a7d8fd16e756e1749582", 0xae}, {&(0x7f0000000840)="eb3fd22a4ee9", 0x6}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast1, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @empty}}}], 0x40}}], 0x3, 0x28005) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) r13 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r13) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r14, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$IOC_PR_RESERVE(r14, 0x401070c9, &(0x7f0000000180)={0x3, 0x400, 0x1}) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:59 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/194, &(0x7f0000000240)=0xc2) socket(0x10, 0x10000a, 0xcb2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) openat(r1, &(0x7f0000000340)='./file0\x00', 0x410702, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f0000000080)=0x2) prctl$PR_SET_PDEATHSIG(0x1, 0x1a) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000280)='/dev/keychord\x00', 0x8000, 0x0) sendto$packet(r4, &(0x7f0000000300)="34ba1b82b12e0fd0dfae", 0xfffffec8, 0x20040800, 0x0, 0x0) 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:06:59 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r3, 0x16, 0x1, 0xffffffff7fffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) [ 167.814074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57389 sclass=netlink_route_socket pig=12829 comm=syz-executor.2 08:06:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r4) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f00000000c0)=0x21f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 08:07:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:00 executing program 5: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a63686b70778a83f7d665635f743a73302073797374656d5f7500"], 0x2c) write(r2, &(0x7f00000001c0), 0xfffffef3) write$P9_RLCREATE(r2, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x4, 0x6}, 0x7}}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)=0x2) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) 08:07:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r4) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f00000000c0)=0x21f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 08:07:00 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x434000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x3}, @dead_binder_done], 0x77, 0x0, &(0x7f0000000040)="23a38ca0edb1b4531a32f5aa006e2ade7d13d5988197680d4233acf0a30b507cc17627ce96badd168d1cf09fb0d5e3bb3a8bc21210582a6354d181dcc3d813e6be4e0b20d7507728df5feef63fe78d16e236977d81630391c822f78932019b93c7c496b162ed33a519880bb11310ba6425938e0bca20ac"}) 08:07:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 08:07:00 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r3, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r4, &(0x7f0000000a80)) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r4) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f00000000c0)=0x21f) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r9) 08:07:00 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/251) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x20) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) r6 = accept4$packet(r5, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) splice(r3, &(0x7f0000000000), r6, &(0x7f0000000040), 0x1e6b0976, 0x12) 08:07:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(0x0, 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x36b, r3, 0x900, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c47}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44011) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x40}, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r6 = creat(&(0x7f0000000080)='./file0\x00', 0x80) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r7, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:01 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000004, 0x0) 08:07:01 executing program 1: open(&(0x7f0000000180)='.\x00', 0x678080, 0x10) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/7, 0x7}, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) 08:07:01 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x3fffffe, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 08:07:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x5, 0x1, 0x1, 0x37f, 0xf0, "f91a114ef461e1bfdf447cfe86176bcdfdbaf21e8ea7a4d6526a9b387ca1a2792ae4abed7204f75839f21ee73c14615832d21be70cd11f88d0866c468716d4ada44e4709c363bdaf7e1944ac415199378d42da5c41bde8cd702425575e8c5d137a0f90f9b64bdcf6ffe898a70420ab130750564f28a68f06eb5b9e4fd920cbf0d17e28e5668cfe2352c66de095bb9186b9dc24bd32c796def4f6e4dc24d01c8868d7adf27385db73e31d04f0a9c3ef50f3154d2229cf51d6dbc469487c3fb94e26b4294204331a0d1b9de390eca461743a4f457b13fb92a8a6e2c3f2bbc58b9c721c505b2240ab791af5f9e4b1072a46"}, 0xfa, 0x3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) 08:07:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x40}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20000800) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4000001, 0x0) 08:07:01 executing program 1: arch_prctl$ARCH_SET_GS(0x1001, 0x401) syz_open_dev$loop(&(0x7f0000000080)='/d\x01\x00)|\x9a\x13p#\x00', 0x4000001, 0x4000) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x500, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @loopback, 0x0}, &(0x7f0000000100)=0xc) connect$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x101, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x2, 0x4) 08:07:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x32) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ptrace$setsig(0x4203, r2, 0x1, &(0x7f0000000000)={0x5, 0xe07, 0x120000002}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r5, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xfd, r5, 0x1, 0x4, 0x6, @broadcast}, 0x14) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000000c0)) 08:07:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, r0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:07:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d0073bc00fdff69774a79a1c5cdb910", @ANYRES32=r4, @ANYBLOB="00000000000000100000000092a9046834c4475dc029adb8e84433153102023111ae89601e07d2874fa49e41324c6e5db5c63946ab8dc369b0fc702e84e0a50f057134788395c6ee8df008f4456af114a8fbc91442289daa02e61b1cdf2cca9eec793c5b3712f1091bac9ac1ebd6940d7f5d689e9062bcf8837f2460e1929a84e57668f393b13070f0240db9d67502938f9e96081d78e1727019babe9b0222e6af71f735d61ada838bd87faec76c9126741d896e0054c102c560a8833bca9929795f016c499dca0b69f68b4bc54213c3e3d5725e470077ac350daca713e0e63b9374571637ef2de930bbba5d37b35492cff6ed2005d69099f6bb787c7f4265c6c72d3c075e105eafa8ed99230c2709b81c071465f1ec1b40f3297f5a007cd18624cbdb1ca1d8757e1469c8a6bfc47fae9b74ea3be4b97efaf5c9cb4e5cacc3ab71af3fb9eeb06a14990a40e756c97408cffea5695ea2b815f437c0a74093e8fc0727944260977d143052c06e5ad7f5d3c3fe379ffc58188da8e5f8e1"], 0x24}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f0000000080)={@empty, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040), 0x10) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2400, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e20, @rand_addr=0x7}}) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 08:07:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x7) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r2) 08:07:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:02 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) 08:07:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x7) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x20) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) r6 = accept4$packet(r5, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) splice(r3, &(0x7f0000000000), r6, &(0x7f0000000040), 0x1e6b0976, 0x12) 08:07:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = gettid() ptrace$setopts(0x4200, r2, 0x7, 0x4) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) dup(r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:07:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '!vboxnet0wlan0+\x00'}, &(0x7f0000000140)=""/30, 0x1e) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000040)={0x0, 0xffffffffffffffff, {0x53, 0x9ad4, 0x719b, {0x7, 0x6}, {0x400, 0x2a}, @period={0x5b, 0x1, 0x7fff, 0x8, 0x1, {0x7, 0x8001, 0x7, 0x2}}}, {0x51, 0x6a778275, 0x7fffffff, {0x71, 0xffffffff}, {0xfffffffffffff28f, 0x3ff}, @ramp={0x7ff, 0xfffffffffffff1a4, {0x3ff, 0x5, 0x8}}}}) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) write(r0, &(0x7f0000000000)="fc8d7d1f434408a05ed53b3a5ce9b6909f5b283eb0da04c64eba5c430563266f20459fa823e5fc01f6b13d05f846b9b3b4991b8a4def46a9c37d3273f2d96fa2b8bc7d844f36cc6cfc4cd3612a3b59c41b05cf6a92071c43896412f1d1590b2b5740d63e1a861f2269b7a7f9e771ad84668b557f6b5e617636d10215e0c387", 0x7f) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) 08:07:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d0073bc00fdff69774a79a1c5cdb910", @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f0000000080)={@empty, r4}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040), 0x10) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2400, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e20, @rand_addr=0x7}}) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 08:07:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x46) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000010c0)={'veth0_to_bridge\x00', 0xfff}) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000001100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r4, &(0x7f0000002100)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/4096, 0xff5d) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r5, &(0x7f0000000700), 0x31f, 0x10400003) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000240)=0x400) listen(r6, 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000001080)=0x6) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000000c0)) 08:07:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 08:07:02 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80585414, &(0x7f0000000080)=""/193) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x1181, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)=0x0) sched_rr_get_interval(r4, &(0x7f00000002c0)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r5, 0x0, 0x2, 0x7f, 0x80000000}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x183001, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') prctl$PR_SET_FP_MODE(0x2d, 0x3) preadv(r7, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000000240)={0x8000, 0xf2e, 0x4, 0xffffffffffffffff}) mkdirat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x1ff) 08:07:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x109001) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x103000, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000180)) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = getpid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r8, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r9, &(0x7f0000000a80)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r11 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r11, 0x107, 0xd, 0x0, 0x0) fcntl$getownex(r11, 0x10, &(0x7f0000000600)={0x0, 0x0}) setfsuid(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) r13 = accept4$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @initdev}, &(0x7f0000000700)=0x10, 0x800) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/loop-control\x00', 0x80000, 0x0) r15 = socket$netlink(0x10, 0x3, 0x3) r16 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r16, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r16, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r17, &(0x7f0000000a80)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000800)=0xe8) setfsuid(r18) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r20, 0x107, 0xd, 0x0, 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="db17e97d17adea30481d4c98e009c5483bcd4180dd0778095f3c8727afa09b706fbc6f73d3c5b27f9934d97f50e414181b720e0d3100f003ea154fdf9e", @ANYRESDEC, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[], @ANYRESDEC, @ANYRES32=r6, @ANYRES64=r10, @ANYRESDEC], @ANYRESDEC=r19]) r21 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000780)='/dev/keychord\x00', 0x200000, 0x0) r22 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r22, 0x107, 0xd, 0x0, 0x0) r23 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r23, 0x40046602, &(0x7f0000000240)=0x400) sendmsg$unix(r4, &(0x7f00000007c0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="35394650a4ff2138b4d4a0e26c12f12d1db5038631413a3fe266f66c8d00502808258e9c7cd96cec038e1c0964bda1cf841db7d05e3bfea663437cf368e56d22e3b1d0b20904980d806a62f1d63f2ba29522d7ea1501ff88c0a6d023f0ece67faafd57bf7b94a03541b4223573f2a4a057ff5de860b69134a60a1d74cd628eea70753dca64fb63d4ca6d5ab0", 0x8c}, {&(0x7f0000000480)="4546ff53caf895a30ef57f8c1f06c9682ea3e576b2a734d39fcb0c5e965f1d2f49a8f27f1c585ad9bc522a9507291f", 0xffffff97}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="0c000000010000000100000018000000bb6d47aa66c84056", @ANYRES32=r12, @ANYRES32, @ANYRES32=r12, @ANYRESHEX=r23, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32, @ANYRES32=r15, @ANYRES32=r3, @ANYBLOB="180000000100000002000000e2978597a99b9bf000c972423fc090ef80c18283a86e91f427c57d650d721f234a8231a00af291d38509f5b2f0175c287c570c0c2416daa2df0e7a30560103f13bdef0e8dfc5867d710be26645d658c25ad1a9a91cd7c3a6a86136967acaa2dacfc444bf7162ad3a72b48e42e3a1ff1f63b03f89c73fa7ef9743ec329ad0", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="140000000100000001000000", @ANYRES32=r2, @ANYRES32=r21, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r22], 0x140, 0x4c000}, 0x40800) rmdir(&(0x7f0000000300)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000240)=0x400) sendto$inet(r3, &(0x7f0000000040)="feca9ac0700f91ea874b9819bc3ae4d275d7eec0136940d423d620922693eb3710e8cce830e28925f843ec93bd93791406b848697ba43b84b1a7e1e5109be9e643b534281638a37b8d0cdd65100ab8d83e80b4dfc40bda4227e50a27736d4fae0bc0a2949e9e769ee0caa8de63ed652bf8d2880d0a53ea8cd91f0c503ebee26175c87dd13f25cd89b940efde36d9e2b3959d734371256a86808931474a204a3ef3c0088af409806ec61f861dd7bd130a437dd52da29837d93b5efe01efdb0527497f81ae6aa3d1bec3b1563ace827b5a2767af61ff49c3402bb7f37e6a7e729d434c42c753733cf799b9e8d86b6600856714691433fab94e", 0xf8, 0x420044cc, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) 08:07:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) write(r0, &(0x7f0000000000)="fc8d7d1f434408a05ed53b3a5ce9b6909f5b283eb0da04c64eba5c430563266f20459fa823e5fc01f6b13d05f846b9b3b4991b8a4def46a9c37d3273f2d96fa2b8bc7d844f36cc6cfc4cd3612a3b59c41b05cf6a92071c43896412f1d1590b2b5740d63e1a861f2269b7a7f9e771ad84668b557f6b5e617636d10215e0c387", 0x7f) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) 08:07:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 08:07:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x6, 0x6, 0x5}, 0xa) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) 08:07:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x46) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000010c0)={'veth0_to_bridge\x00', 0xfff}) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000001100)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r4, &(0x7f0000002100)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/4096, 0xff5d) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r5, &(0x7f0000000700), 0x31f, 0x10400003) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000240)=0x400) listen(r6, 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000001080)=0x6) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000000c0)) 08:07:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:07:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) write(r0, &(0x7f0000000040)="d3b9eaeb750766c8a545f4b49a44df0f", 0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x2}) 08:07:03 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/~ev@YS\x11p#\x00', 0x4000003, 0x20084) 08:07:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/lo\x12\x00\x00\x00\x00\x00\x00\x00S\x8b\x00', 0x40000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000240)=0x400) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/144], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/84], 0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/176) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000100)=""/121) 08:07:03 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) 08:07:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) io_setup(0x4, &(0x7f0000000000)=0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) r9 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r10, &(0x7f0000000700), 0x31f, 0x10400003) io_submit(r4, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x2, r5, &(0x7f0000000040)="c21ffab9a0b486dcc75318db80b6d91642081810f8fa3e175b8c3a87f9ca481ab68b273a56cdf9a56fcc13dc6c4a19c1c2d169962b8fb20a5b9da24567d20f05f2647902975b81ade01e183e6ff90efb78f1135926e8151697b918f525175465859d2f2d444827", 0x67, 0x0, 0x0, 0x0, r8}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000000100)="eed58010c0ac2c328790c2158bdf026b015813c04bbf46b145b7ca7fd4d87610efe4e73783e03a8b3f14317b3a65ab1c5716476e2ceb9adb8a517f0f109bd8c84287309197a65a900673506a1f9e609aa0aab2c888907a88bc4ecb19335590a249cca6d061e661960ed4234c493f3fb36896e72df721c0afcc3a7d6105db6f08fc2d2163f078ef37df563bf20b8d459fa5c1192af8a891a6662a39b1c70ed9902ef34d3c72545a6a9310f2769385840fe5e3899ef632eac559635df10eabfdd387e59fffa9a454cdf7f0c1352094c01d6440ffce075af7f941fbb5136997ed98d738c43037c6c9c30c", 0xe9, 0x5, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xeeb9149, r2, &(0x7f0000000280)="1b6f5472dee7588fdc566e7f7b74b1a6d046c64b593e5154037f22f5ef5243d83c8ba77d92d041b481c26e28dabaa52917cc7db17cb750c15639be0bcb73236816832bf3abbbfd3ec603a39def03593aa06c6b271459fd19c6876b3146e28f89caf5833a542135c1d6bf72ae93806061616a6c91c2f0fecf83d3619543b709a34aad1a892994afffcd8be2d27ad45c0ebca27970f212e2c25abffd66bcd73046ebc138c95493f114bf856ac2dce2c89ad8a91cd49f95f0f9a1c302bd2d3f5aa914deae25fe7c95d8f4ff1461bf999f1106ab7508fe03aa34", 0xd8, 0x9, 0x0, 0x5, r10}]) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000400)}) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r11, 0x4c80, r12) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) r13 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r13) 08:07:03 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x3ce76efb990dd7d9, 0x0, 0x3, 0x374, 0xf0, 0x9, 0x279, 0x3}, "763cc856c817755c0d720e00b6f68ffd6f5032fcca3032f090be714a9147a08bcf89fefc2d1d7d8f7a07e7c548fe4764103a881b790644999214d5a45e2f3c7a66adb2933f4f993b953cbc8463a3e33b6bb8d24165f580c62649040e5f34bf3d3f2c6bff80ea17427527c35f", [[], [], [], [], [], []]}, 0x68c) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:03 executing program 1: syz_open_dev$loop(&(0x7f0000000040)='/\x1f_\x87\xe2\xdf\xc2\nV#\x00', 0x4, 0x101002) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x13) 08:07:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000280)={@rand_addr="b1084b4799bff197bc04b807af211c26", 0x64, r4}) r5 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r5, 0x29, 0x19, 0x0, 0x0) 08:07:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x5, 0x16, 0x6, 0x8, 0x2, 0xfffffffffffff658, 0x7, 0x1ff, 0xfffffffffffffffb}) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) dup3(r0, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$PPPIOCSCOMPRESS(r2, 0x400c744d) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000040)=""/81) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) 08:07:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x1, 0x4, 0x6, 0x0, 0x0, [{r0, 0x0, 0x5}, {0xffffffffffffffff, 0x0, 0x5}, {r1, 0x0, 0x9}, {r2, 0x0, 0x7fffffff}, {r3, 0x0, 0x200}, {r1, 0x0, 0xff}]}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000180)={'syz1', "20feca14b65d58e477d5c8707d524ffc9c2566e18629d26355fe2113a0c08f08491319d898873130b4c5deb90ce082c7932a66e6f8dd1ab9d6c3fc70ca4b2f7c171e938c05adfa23755abef7edea74cc4b8acde0ca09c4209092fbee7309033163cf852bdd"}, 0x69) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000000)="a193bae7ea6079f6e7c86be31e0d9dca888b3e2dda5d1dabe4f618346eeca1a82ab0cdf697adf6665daa646f4121ce8e821efb455c7946531e61a2b16ecf98135bff735e8266ced0cf068d8a85795513a17dc220e6231ed6ccdc7090465553dc508a00c6cea3c76534dd649efe2f4e4355ce7f27bb5038c548ca66e412301335", 0x80) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:03 executing program 1: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x2, 0x400, 0x8001}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000180)=""/216) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) openat$cgroup(r2, &(0x7f0000000040)='W\x01@\x00', 0x200002, 0x0) 08:07:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0803000000000000c910000000000000000000000000000000010401dc0001003fa3b9e33e3a2c"], 0x20) fcntl$dupfd(r0, 0x0, r0) 08:07:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) 08:07:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r2 = memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0xd61, @mcast1, 0x10001}, {0xa, 0x4e20, 0x6, @loopback, 0x704}, 0x1f, [0x8, 0x101, 0x6, 0x0, 0x401, 0x8, 0x200, 0x3]}, 0x5c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:04 executing program 3: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet6_udp_int(r0, 0x11, 0x33, &(0x7f0000000000)=0x3, 0x4) 08:07:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @empty}, {0x306, @remote}, 0x10, {0x2, 0x4e21, @local}, 'ip6erspan0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x2) 08:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000040)=@random={'btrfs.', 'system.advise\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x7fffffff) 08:07:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "34203b84ce2adf35ceba55f8c4f33b67d3b6a08631a919be65c771d498d1f22f5cec2b562530a9c85445faa75ef25009203d5515078bf2caff1a197d87d40a31a40de40b3c469263bae8df1f26ece3e2076d3a"}, 0x57) 08:07:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x5, 0x16, 0x6, 0x8, 0x2, 0xfffffffffffff658, 0x7, 0x1ff, 0xfffffffffffffffb}) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) dup3(r0, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$PPPIOCSCOMPRESS(r2, 0x400c744d) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000040)=""/81) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) 08:07:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "34203b84ce2adf35ceba55f8c4f33b67d3b6a08631a919be65c771d498d1f22f5cec2b562530a9c85445faa75ef25009203d5515078bf2caff1a197d87d40a31a40de40b3c469263bae8df1f26ece3e2076d3a"}, 0x57) 08:07:04 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040)=0xb2e0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) setsockopt$inet6_int(r4, 0x29, 0x50, 0x0, 0x0) 08:07:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x9b, "ea23a05c1261a515a1f81699de78eecfbfb0314afe4dd8a96a9b1f8512a5af4b8d1fbb83bb749da2dc3d6869ed8626a39b1b10a9644dd9cc1bfe028b595fe8983186482d2af3c5c9216e10ba27466a9839ed79066450253e2908d44b5fc273c60829105cb58cf038c81096910fbc440c5256f7193b1624dcfb1353224d091b0da4255a159932c6ea054ceef33595f04166472faf3e44585bb81c85"}, &(0x7f00000002c0)=0xbf) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x25, 0x4, @thr={&(0x7f0000000040)="faa1c6560b98c2c8d24880521e556b", &(0x7f0000000080)="2d383ea10c9893ae3ed3e4509a5ce6e12c5057f2d5fe9361de00928d6e70fd07e9c2bf31859351c069b2f8709a808db26ac4527bb974737340b1a27b209a552719e490701e"}}, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 08:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$void(r0, 0xc0045878) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCEXCL(r2, 0x540c) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x129b07d7ea558da0}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="a226814fbed5673a505ed80ee82bae45268ed72e010c763d1a2cd26198a9633505c2ce8682b0f3e940c4005a51dd49ec793fbacbf7e877db9c32351d950f9026e94f465b7cef4862875255600458ab16b36a116be175fa711e4e7a5776af46cafcc133d06d1ebf5c5be502cbc50ccbbe096fe62affd96415798a"], 0x3}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9209}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}}, 0x20040084) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000240)=[{{&(0x7f0000000000)=@rc={0x1f, {0x5, 0x100, 0x0, 0x947b, 0xffffffffffffffff, 0x5}, 0x20}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="15c425bc830e17fc56900f72ea2cf6b198ac11b8a339050a784730abf496003d4f930c58586847be3026328beea5591c69d556a1483059b935827702adffd19764f219e5d506b84c0419bae7c85aadb88f5c87a37f5918712145c5719000ab3ead3b20794370932d9bbdc0c38467e72cfac117e0c8fbece8be72cdb191425ab4956ce2c057210f1d4da571d734011955761bd7977c360485f81a0a315ceda198b6db92268e72e7eddafb2c70ced64a17a18a141b028b57bd8f2649560bfb8cb95082b664782468dc75550e", 0xcb}], 0x1, &(0x7f00000001c0)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x9}}, @mark={{0x10, 0x1, 0x24, 0x7fff}}], 0x48}}], 0x1, 0x40024) 08:07:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs(r1, &(0x7f0000000080)='mounts\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) ioctl(r2, 0x10001, &(0x7f00000000c0)="5041a097bb25e1da37a68564cfb2b2cb4e9fad1b5ad072416615be548b540bfa9124a0705b50a710080d1f67540997c3ec953d5cabd9f0a02129afac6740c6c3d234cceb237e7918919b6cc38f92fb8dd0ab2c8f2aadef7d2571af81648df6ae8fbc90737ed94b82d10bc087e39a680f44edee04ead992c87cf5355ab0530cc48b1d87bb") fcntl$dupfd(r0, 0x0, r0) 08:07:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:05 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/(\xe5{wlan0'}], 0xa, "54a56037ea6e8081cf4a6d3d9996872c78876eff037894019612eaa68798a437811bd9a9b9a71c56d2bb92c7b5836ecb4008f78d854eb53da4adcf23b84adc3d0c00f1c326692fba8101d3406196fb15d237d51ccc7e2202a4581f2025f38bdc9939fb96a09beeb4d0ef11368084ac738b811cec3e4047989120e3c03f6f"}, 0x93) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) 08:07:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x9, 0x4, 0x1, 0x5, 0x16, 0x6, 0x8, 0x2, 0xfffffffffffff658, 0x7, 0x1ff, 0xfffffffffffffffb}) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) dup3(r0, r3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$PPPIOCSCOMPRESS(r2, 0x400c744d) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000040)=""/81) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) 08:07:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x356ea3a2403551b0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000000)={0xe, 0x9, 0x6, 0x4, 0x50, "753bc5e694a8f285ddf0b67a039d64e4d9c951947ae1ae1096cc2e8d9c069fc8bf24e632d41f9abb8e7cc0af73ba434d001cc00962ba9156232790b194b176c100f6191324381419f5facb40576c307c"}, 0x5c) 08:07:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r4, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r5, &(0x7f0000000a80)) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a279", @ANYRESDEC=r7]) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r8, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380)=0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r14, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r15, &(0x7f0000000a80)) r16 = getpgrp(r15) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000680)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000040)={0x10, 0x31, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f0000000100)={0x178, 0x2d, 0x2, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x2, @ipv6=@mcast1}, @typed={0x8, 0x4b, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @typed={0x10, 0x7e, @str='[vmnet1]\x00'}, @typed={0x8, 0x34, @uid=r3}, @nested={0x12c, 0x87, [@typed={0xb0, 0x7d, @binary="35c2a136041c87bb43b76c95b57047f71d2fcc8e84170fcb12516c140898eff9a0a2e859c9172bc5c6fe0451042e671c135c6ab7ae323bbf3468525bcce8863cfae22bf8bc79a4f8bca1d520c6e3bdb8189a623795f2aaac76b7649640b9f40916e68754225ec5e1665b2c8360a4bf753f083ab3da7206acf9a6bebb362722178f9249867c45fabdad44cb22336e3e1db9dac07f60bf92b098045e12f3bb8893412f3e07b60c391c6c5bd3"}, @typed={0x8, 0x2d, @u32=0x3}, @typed={0x8, 0x59, @fd=r0}, @generic="0019c243c0047db49b36ea0fe2c6c058fdc5aac4bcaad51a88d78a6a0ec9ac391e22be8bee854cbf5117fad23b6c523065b82084a7b4c09aaa478aaef5ca0c58330bae50e24c479498b3492750e96ee20088abeee4beb39d592937e50255ce29e7a62b27cdf9"]}, @typed={0x8, 0x2f, @ipv4=@remote}]}, 0x178}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18], 0x68, 0x5c40c}, 0x0) r19 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r19, 0x29, 0x19, 0x0, 0x0) 08:07:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r4, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r5, &(0x7f0000000a80)) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a279", @ANYRESDEC=r7]) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r8, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000380)=0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) ioctl$LOOP_CTL_ADD(r12, 0x4c80, r13) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) r14 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r14, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r15, &(0x7f0000000a80)) r16 = getpgrp(r15) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000680)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000040)={0x10, 0x31, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f0000000100)={0x178, 0x2d, 0x2, 0x70bd27, 0x25dfdbff, "", [@typed={0x14, 0x2, @ipv6=@mcast1}, @typed={0x8, 0x4b, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @typed={0x10, 0x7e, @str='[vmnet1]\x00'}, @typed={0x8, 0x34, @uid=r3}, @nested={0x12c, 0x87, [@typed={0xb0, 0x7d, @binary="35c2a136041c87bb43b76c95b57047f71d2fcc8e84170fcb12516c140898eff9a0a2e859c9172bc5c6fe0451042e671c135c6ab7ae323bbf3468525bcce8863cfae22bf8bc79a4f8bca1d520c6e3bdb8189a623795f2aaac76b7649640b9f40916e68754225ec5e1665b2c8360a4bf753f083ab3da7206acf9a6bebb362722178f9249867c45fabdad44cb22336e3e1db9dac07f60bf92b098045e12f3bb8893412f3e07b60c391c6c5bd3"}, @typed={0x8, 0x2d, @u32=0x3}, @typed={0x8, 0x59, @fd=r0}, @generic="0019c243c0047db49b36ea0fe2c6c058fdc5aac4bcaad51a88d78a6a0ec9ac391e22be8bee854cbf5117fad23b6c523065b82084a7b4c09aaa478aaef5ca0c58330bae50e24c479498b3492750e96ee20088abeee4beb39d592937e50255ce29e7a62b27cdf9"]}, @typed={0x8, 0x2f, @ipv4=@remote}]}, 0x178}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18], 0x68, 0x5c40c}, 0x0) r19 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r19, 0x29, 0x19, 0x0, 0x0) 08:07:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:usb_device_t:s0\x00', 0x22, 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) 08:07:06 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:06 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 08:07:06 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x7) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendfile(r0, r1, &(0x7f0000000040), 0x8d) preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0xcd97) socket$packet(0x11, 0x3, 0x300) 08:07:06 executing program 5: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x4, 0x6, 0x3, 0x2}, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 08:07:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x5, 0x5}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/f5llD', 0x40000, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0), 0x0, 0x80800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "253e62073beefed8"}) 08:07:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) 08:07:06 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 08:07:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x5, 0x5}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/f5llD', 0x40000, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0), 0x0, 0x80800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "253e62073beefed8"}) 08:07:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, 0x0) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:06 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 08:07:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x5, 0x5}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/f5llD', 0x40000, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0), 0x0, 0x80800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "253e62073beefed8"}) 08:07:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) 08:07:06 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 08:07:07 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:07 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) 08:07:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x5, 0x5}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/f5llD', 0x40000, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0), 0x0, 0x80800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "253e62073beefed8"}) 08:07:07 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000fa8af1f81dde0700000200f929de"], 0x10}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r3, 0x102, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbd3}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040000}, 0x1) ioctl$TIOCEXCL(r2, 0x540c) openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x129b07d7ea558da0}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="a226814fbed5673a505ed80ee82bae45268ed72e010c763d1a2cd26198a9633505c2ce8682b0f3e940c4005a51dd49ec793fbacbf7e877db9c32351d950f9026e94f465b7cef4862875255600458ab16b36a116be175fa711e4e7a5776af46cafcc133d06d1ebf5c5be502cbc50ccbbe096fe62affd96415798a"], 0x3}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000500)={0x9, 0x6, 0x7, 0x2, 0x70, 0xfff, 0x2, 0x9, 0x1f, 0x7, 0x2, 0x1ff, 0x103c, 0xd63d, &(0x7f0000000440)=""/176, 0x800, 0x1c02, 0x789c}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000240)=0x400) sendmmsg(r5, &(0x7f0000003100)=[{{&(0x7f0000000680)=@l2={0x1f, 0x81, {0x100, 0x470, 0x505, 0x7, 0x4, 0x9}, 0x2, 0xffffffffffffffc0}, 0x80, &(0x7f0000000580)=[{&(0x7f00000007c0)="31eccbd3cfdb037e603058ea13c8c670998711a541f4bb3bd144b2ea686974bbbbb9e6dd21e6463cff0c62a32adc94305a16d651563aec0e2b7da3f6e3aad57890bee031df38dff1caf989b6d1383ef373c2fbd8afb883afc356fa0ecd49a658b2388145ff28832f338ca8209dc0a4303db92747647dee142c56", 0x7a}], 0x1, &(0x7f0000000840)=[{0xb8, 0x102, 0x8001, "e8b87cd2ba13d9b23677310f20f4b55095c050b65674991405eb773e019742c1d717004b8ee7a6d69577819eaa692b1ee9338e64a9b560adaa7592f8ff4318a4964f54c1068d2bae951114a1b889acb2edd1bd9c14d5162c613c8185dbcba7873b47d0b86742e7ec5de4415769320f5ea825909ed8b646bf8e0fc487fc26e6cf36ea1e714351e2a325a32bd20b33efa16d81317776bb4c7b07c4e786aebde42e52ff29bca4edf25284a4"}, {0x60, 0x107, 0x2, "18074a79d3d514f1289da3eeac3b272840bf8b5a07faf6a91a6dac6adf4843e372ed132e0786c00fbfa0e609c2cac7aa58b3368c8fec137dad0fd545618b4d2795da68f17cb8051df3f58cbffd4a09c36a7e2153"}, {0xa0, 0x100, 0x7, "8cc9f5e795c9ca6b9574cf116e812c7d867ae65cac862eaf83d387aec682610d7e27c00f9f2d6ac730b0d25ea95fd4763dd204e83b1cb3b1948a1873cb9154ce0f3d6ae03e7c2dbca0f28eb11585c9d99016d43c2db1d933c2c3fa322bf1f629cc4dc4630cee9f52cdddcc1f642f88a26585d4602862a09ab10d97e4221e8fe90b5ae72edf32a4313245de2de311289d0a70ab"}, {0x14, 0x108, 0xfffffffffffff1c3, "cf854c90ae0042e7"}, {0xb4, 0xba1468886b1ea60c, 0x80000001, "ee1c3d075ee9729a57cb07a372ab572dd7d5f9277a9d0454f2100a540c7424d4487b7c4b91e599f32a343c65136d1d69b1d359baac1c38e98b67e157eff13e42d3f2f12c1e732fb6e1f4de3cfa3c0284012c80408c23cd4742cbcbbc69aa90a27923192392676890fac62cd299942dcb2ed80602ba3a6fa3ffcd2258fdc9c775ce451fc4feb54ed24d60db7ddf862449438dfa9fc25b830d278923171c16b6ad3ddc95a7df"}], 0x280}}, {{&(0x7f0000000ac0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x90000}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="aa38aa602dca27bb8d0aec97d1f94e7d7533565acc2caa56b03fe3aa4136958ba7f36992d9a607037d752a53228e486a73574e2c8a58e1b1e9290519872b71e772de012c1781a964a7936d3eb684069b4b2480e27690b7c58b2d32843e57a65c18ed131955553222020f8f55a8", 0x6d}, {&(0x7f0000001bc0)="061b6d5e0ce77d6b36a830fa005a099e85628d817942d775420860624c6729d8e5f2e177cbb464ff1883fb086d2e7633f93b0143fda412e35f0192c077f7bf5ab509cd", 0x43}, {&(0x7f0000001c40)="aa8c77e4c5a1902d5b68c57995e9758ea060b3b35525f7ac481c755615eafef2b99bc8ee8c2dbdfeec5d18d66b86d63dbb2b29c261d172304859895c97506c4099357c22ee8be02bb530", 0x4a}], 0x4}}, {{&(0x7f0000001cc0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d40)="3e3a26819dc3e47ebcc61f8675df18daba7f0cb6303020d35a0f68b4fdf1929f30f3fe7b48c2c1d8d204644220dbe939", 0x30}, {&(0x7f0000001d80)="0d2d513c115834a9bf72eff85e1c8b9ff39fcedc9882f9931c8936cfa6c8251a0b079b6e1d69f49241a761f700176bdfb6c77b8d66823b26ef3afd9a0aeefec1cfb596ee3661b761c52a", 0x4a}, {&(0x7f0000001e00)="70276eafb7dca1190cd6fc274a67e4b937ff4fa05bb3527e90dbdaa0d0be4767b72adcf028300a0578ce651f13c6a01253eeaf99df32b3e751f55b17bf7990069e781ca11a0b2d26a526bf71d7981ee4e8329fb4ac1d5c2455b172ee41d0bf749f9f2ac2a8e86e1afb2ea37730d6d8698345468e6bbc00041ea7325298b4ba9694ec84e322ffbcbe05dac499cfa605b9cf6de8c33f4f6146103d0b4a357fd7f4668d9ffc03866b3acb27abdce0f3e520719e9d3626a9ef8bff8e926f2fb7ace387206d7d63871e68bbaee5e8a21c302ef3a732925c32a783a085760846dc585dee3299715a3326c7fe1adebc", 0xec}, {&(0x7f0000001f00)="2271fedebdb8f4930e10e7e2b95c78b41e10894ae650970d7fed26438ef8ae439093cd405cc2d132f64c2fd90cb6a00f54847a066a0eb9c039fbfc1283d0cabfa27156b03f7ea9aa4cddee116d807612073c2bd3a27a56fe674c500dde13c8e7be7dd27257a35d09d1398986c104981016a342e7a9814b8da7cee22856b3e361edd00865a357915efcba5ce257cd55cd85b1a0bb9da455bbf2bdba6f20dec672b882f1045a4ea9d6f97a300387fba019360229f6455a8fbba2df45ba2e39c06003aa9769de04ac44b2816901db7c7c8878a36cb52af820180d4abc84bcaeb50cbe0dad7c46383590bf", 0xe9}, {&(0x7f0000002000)="9c2bc04d6e691a29d05641b0644ac00cece85fb712dcfbe9c9a17a0781", 0x1d}], 0x5, &(0x7f0000002080)=[{0x100c, 0x111, 0x1, "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"}, {0x50, 0x228, 0x0, "bd026383f0716271475b61e39222f18e5abb33c2a7348fbd844f756993d22f0e531a2d66b210cba6abdbbb5ba3874e39d28281dfd8261e911335ceec484e945733b5127b"}, {0xc, 0x102, 0x3}], 0x1068}}], 0x3, 0x80338303e9e18c48) 08:07:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200), 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:07 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x129b07d7ea558da0}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c6339e3a70ffa22f2cd5250605cedd3f319", @ANYRES16=r1, @ANYBLOB="a226814fbed5673a505ed80ee82bae45268ed72e010c763d1a2cd26198a9633505c2ce8682b0f3e940c4005a51dd49ec793fbacbf7e877db9c32351d950f9026e94f465b7cef4862875255600458ab16b36a116be175fa711e4e7a5776af46cafcc133d06d1ebf5c5be502cbc50ccbbe096fe62affd96415798a"], 0x3}, 0x1, 0x0, 0x0, 0x20000891}, 0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb534ebb06204acfc}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) setsockopt(r2, 0xffff, 0x8, &(0x7f0000000400)="a71d50cd0980e8910a3a909a47dccbb22a6acc54cc4f8521a8e0a73e3fa7c036cc1d43d2a89a7d67e12e2a9ae0cc6337e6b8afbd945e89e8da21a3a2063b4c5ffbf3897fcda42ad0d294cc4c75cac940250640f56defeaa949f986f72b5f1472118b8ce5b7149ef8342c3ccf5ce9495b639362371ffe61b79a90e5bd31e758c83c07587b569e982a1fd688af5367d14c17b694b445e94e7449d9e105b9103357f699040f9f6a6d2f78da7ec228b809574d5021c8cdcb1532016d866a2f6b698006ff0f5a551f2f7cf90e65a4104ba05def43bac315705c143b78e56a08de1cceb483f7ca280743", 0xe7) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="ef0600090299defbc30000002a00000000"], 0x10}}, 0x0) 08:07:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:07 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x5, 0x5}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/f5llD', 0x40000, 0x0) r4 = accept4$packet(r3, &(0x7f00000000c0), 0x0, 0x80800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "253e62073beefed8"}) 08:07:07 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:08 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 08:07:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) 08:07:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200), 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) 08:07:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[]}}, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r1, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r2, &(0x7f0000000a80)) r3 = getpgid(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getpgid(r3) socket$inet(0x2, 0x800, 0x4) 08:07:08 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:08 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 08:07:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020700090200000004e400000000000038fcbff543f6ad744278558a5180378368f74ca156c3a33c74d46aa4cf1b2d5fdef8eb421069a802fbd3984b95f69458c0abf233f24dd8274dd511df2894"], 0x10}}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOCK(r2, &(0x7f00000009c0)={0x8, 0x35, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=0x0) sched_rr_get_interval(r3, &(0x7f0000000a80)) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000180)={0x1, 0x5, 0x2027}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) 08:07:08 executing program 5: clone(0x100202203, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2b) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:08 executing program 5: clone(0x100202203, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2b) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200), 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:09 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(0x0, &(0x7f0000000040)) 08:07:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:09 executing program 5: clone(0x100202203, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2b) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:09 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(0x0, &(0x7f0000000040)) 08:07:09 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:09 executing program 5: clone(0x100202203, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2b) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:09 executing program 5: clone(0x100202203, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2b) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:07:09 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(0x0, &(0x7f0000000040)) 08:07:09 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) 08:07:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:09 executing program 5: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x200, 0x0) syz_open_procfs(0x0, 0x0) 08:07:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(0xffffffffffffffff, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:10 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) 08:07:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 08:07:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:10 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 08:07:10 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) 08:07:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:10 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) 08:07:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xfffffffffffffffc) 08:07:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 08:07:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(0xffffffffffffffff, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 08:07:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 08:07:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) 08:07:11 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x840, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x7, 0x0, 0x7, 0x80bc, 0x19, 0x8, 0x400, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 08:07:11 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 08:07:11 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80145855799e811f, 0x0, 0x0, 0x0, 0x0) 08:07:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) 08:07:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 08:07:11 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000005a80), 0x4) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:07:11 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) 08:07:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:11 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(0xffffffffffffffff, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") recvfrom$inet(r2, &(0x7f0000000000)=""/67, 0x43, 0x2021, 0x0, 0xfffffffffffffec3) dup3(r0, r1, 0x0) 08:07:11 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ec", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b189d8f1e87738c76cf8a8e40e1fbf46ab9732e45248041521c0ba892dff7fceca3e423ded7d09bfd9e028e229043c5831f9c362baee27fee100548c8cd1d422f9f991f29a15f281889fbf8ce5b352ae83e72014"], 0x0, 0x102}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$void(r0, 0x5451) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x10001) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x200, 0x0) 08:07:11 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') 08:07:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:11 executing program 2: epoll_create(0x200ffff) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00\x00\x00\x00\x00') 08:07:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, &(0x7f00000000c0)) 08:07:12 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ec", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b189d8f1e87738c76cf8a8e40e1fbf46ab9732e45248041521c0ba892dff7fceca3e423ded7d09bfd9e028e229043c5831f9c362baee27fee100548c8cd1d422f9f991f29a15f281889fbf8ce5b352ae83e72014"], 0x0, 0x102}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:12 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 08:07:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) write$P9_RLOCK(r2, &(0x7f00000001c0)={0xfffffffffffffc64}, 0x2) 08:07:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffd93}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x44d40, 0x0) 08:07:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:12 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7397, 0xfdb2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/139, 0x8b}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 08:07:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:07:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x1000000000e2) 08:07:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) [ 181.270413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26996 sclass=netlink_route_socket pig=14022 comm=syz-executor.2 [ 181.284822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26996 sclass=netlink_route_socket pig=14024 comm=syz-executor.2 08:07:15 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ec", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b189d8f1e87738c76cf8a8e40e1fbf46ab9732e45248041521c0ba892dff7fceca3e423ded7d09bfd9e028e229043c5831f9c362baee27fee100548c8cd1d422f9f991f29a15f281889fbf8ce5b352ae83e72014"], 0x0, 0x102}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000bc40)={0x17, 0x2, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xa8, &(0x7f00000000c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:07:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:15 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4182, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0xff, {{0x2, 0x4e23, @multicast2}}, 0x1, 0xa, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @multicast2}}]}, 0x58c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x261c41eb}) ioctl(0xffffffffffffffff, 0x0, 0x0) 08:07:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 08:07:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x84) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getegid() socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x7e) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) mmap$perf(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x400000000002013, r2, 0x0) read$eventfd(r1, 0x0, 0x0) getgid() gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) getpgrp(0x0) geteuid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 08:07:18 executing program 5: r0 = gettid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f95a0f34"], 0x4}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140), 0xc}], 0x100000000000005a}}], 0x1, 0x0) clone(0x20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7e499f5c5fd21dacb7b35ad2998aca50dedea299e5deb90bd622b9f4a177373afcbc3b5bf61816d9160365cccc061c938047d9953b277929434509c7ecfe9659f8afccc983090dfe92f8ec65fcc8e262ebca23c7e811847e2477054fc0136e136f1c21122803ab2e3a7c209f2ad15cbf989a88b6f264c970c954c01b33dd9e31ea8a7dc73435827acf47ed6c54e943473102300841ec", @ANYBLOB="9f3388c5b87b558d8aedcbb605ebcfca9ba7e5b7f64c5649b189d8f1e87738c76cf8a8e40e1fbf46ab9732e45248041521c0ba892dff7fceca3e423ded7d09bfd9e028e229043c5831f9c362baee27fee100548c8cd1d422f9f991f29a15f281889fbf8ce5b352ae83e72014"], 0x0, 0x102}, 0x20) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r0, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x84) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getegid() socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r2, &(0x7f00000001c0), 0x7e) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) mmap$perf(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x400000000002013, r2, 0x0) read$eventfd(r1, 0x0, 0x0) getgid() gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) getpgrp(0x0) geteuid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) 08:07:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x200000000000000}, 0x10}}, 0x0) 08:07:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:18 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:18 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 08:07:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20004001, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() tkill(r2, 0x14) 08:07:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) 08:07:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207279a7c596ffd3f64ad9130df743300f60200000000000003401a0025dcd7979ff48f1cf1f3b2f9d2e0735763bc003a7b78c942bf33899ebb373b702ac981526418656aa6b64297bb3fc7d19c152248d8bee4179b784a1a220035f3b4fd387b5813c373c75604e7e48ea4c04a364e0705fabb560f7dd041c1ed92d419f2677175c5ba82c8425944ac661741de8ec2bbea9517944458f3da60bf5285b3c20054f1b3"], 0x10}}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0xc00) r4 = openat(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', 0x200, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000001780)=""/162, &(0x7f0000001840)=0xa2) bind(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @local}, 0x2, 0x0, 0x2, 0x1}}, 0x80) 08:07:21 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r4) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 08:07:21 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) 08:07:21 executing program 2: clone(0x30100000, 0x0, 0x0, 0x0, 0x0) 08:07:21 executing program 2: r0 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000b00)="c3", 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000040)="a7", 0x1) 08:07:21 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/relabel\x00', 0x2, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, 0x0, 0x0) 08:07:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') sendfile(r0, r1, 0x0, 0x1000000000e2) 08:07:21 executing program 5: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c6"], 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f00000000c0)) [ 189.565362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26996 sclass=netlink_route_socket pig=14243 comm=syz-executor.5 08:07:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@rand_addr=0xe0000000, @loopback, @dev}, 0xc) 08:07:21 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:21 executing program 2: mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xd74a0598f287e475, 0xffffffffffffffff, 0x0) 08:07:21 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000080)={0x216, 0x100000001, [0x4794, 0x8, 0x200, 0x11f5e000], 0x13d}) unshare(0x400) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000902020000000000000000000009da5e61a67ab707dd0552a49fe4589a21c653b0e42ce31fe5d0dae230ac"], 0x10}}, 0x0) 08:07:21 executing program 5: pipe(&(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000001980)='%\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000023c0)='/selinux/enforce\x00', 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) 08:07:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:21 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x10) 08:07:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 08:07:22 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000003000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0x10}], 0x10}}], 0x1, 0x0) 08:07:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0) 08:07:22 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:22 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009f60000000000000001000000"], 0x10}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') 08:07:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 08:07:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:22 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:22 executing program 5: futex(&(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 08:07:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x18d0c0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = dup(r2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x100, 0x793, 0x101}) 08:07:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x7, 0x4) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 08:07:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4404000025000705000020000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000ff030000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000008000000000000000000000078000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000010000500010000000000000003000000"], 0x444}}, 0x0) 08:07:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 08:07:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x13e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 08:07:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 08:07:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x13e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 08:07:23 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 08:07:23 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:23 executing program 3: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x9, 0xa, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x6, @empty, 0x8}, @in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @empty}, 0x9}}]}, 0x50}}, 0x4000841) 08:07:23 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:23 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) 08:07:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18) 08:07:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 08:07:23 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) ptrace(0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x200, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00\x97>\bWV\x9f;\xfa\xd4\xd5\xfe\xbb\xe3+\x1f\xcb\x00\xfd\x03Y3\x1a\xb0\xa0\xd2E\x13$z\xcf\xe5:\xbc\xcf0>6\xc7\x16\xf9\x19\x00'/62) 08:07:23 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) 08:07:23 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x8, 0x4, 0x8, 0x29, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_ident={0x2, 0xa, 0x4a84, 0x0, 0x100}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x8000000000000000, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x11, 0x10, 0x8}, @sadb_x_sec_ctx={0x1d, 0x18, 0x8001, 0x4, 0xda, "681e97ff6c06a90601df15c41d11ca2149dbc9a8f3049d19e0660f669120f4ee1807dc2cb3b93179164079ed4c3f40cd4991ed340490d6f058b44c3ec824f93d8750568ad339c9562ea4b8d288ee59c236b3a662b99bf9c4aa0385b550c1185b91ab93f6d87b0eed3aef1a3bb76cb7552035361b157dd904ac66df83b4c9542278feb2cdcd58b1443ecdeac9a9b4b357c058c5dcb39be9922377a2c9be01defd330d44bbec0c2405e42cdb386d6b6d7f43d6875befdc969a826183735e995c191cae8e66a30d48c764c4f32dce19625de2f4a423f0891d53824f"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x148}}, 0x20000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140)="22da6eb285df89eeaf87c10cb6efd538969a89a4fdb668bfcb9d8cd4926efc84d7e5936e5a50d1be637c0886d6297c8edda36c92b8fcdf3f9ee7e5c434b3297d23ff33234453463676a908c69239594faa703d57bbc7ab96a1123de85dd4706eab98393bfc5b5ddb19bede762aef", 0x6e, r0}, 0x68) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 08:07:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) 08:07:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) fcntl$setflags(r1, 0x2, 0x176f89beb6382545) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "001fe5fa3e60e5c48895d56a744af6e0f868e8c8"}, 0x15, 0x4) 08:07:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x501, 0x0, 0x0, {0x8100000000000000}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, '%p6gre\x00'}, {0x4}}}]}, 0x34}}, 0x0) 08:07:24 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCGWINSZ(r1, 0x5413, 0x0) 08:07:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) socket(0x0, 0x0, 0x0) 08:07:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x43}) 08:07:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x30, r1, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'\nth', 0x3a, '\nridge_slave_1\x00'}}]}]}, 0x30}}, 0x0) 08:07:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x43}) 08:07:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 08:07:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) 08:07:25 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000240)=""/236) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x4000) 08:07:25 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008050}, 0x10404) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) unshare(0x40000000) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000003c0)=""/241) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f00000000c0)=0x0, 0x0) truncate(&(0x7f0000000380)='./file0\x00', 0x5) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000008c0)={0x0, {}, {0x2, 0x4e22, @multicast1}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0xc5, [], 0x0, 0x0, &(0x7f00000004c0)=""/197}, &(0x7f0000000340)=0x78) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x34, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000200)={'ip_vti0\x00', 0x3001}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000640)={0x5, 0x1, 0xfffffffffffffffa}) 08:07:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:25 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:07:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 193.741645] : renamed from ip_vti0 08:07:25 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7) ptrace$pokeuser(0x6, r0, 0x388, 0x10) 08:07:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000ac0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) [ 193.947873] input: syz0 as /devices/virtual/input/input41 [ 194.001758] input: syz0 as /devices/virtual/input/input42 08:07:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) 08:07:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200090200001eba76b760ce3892a7e87fa62f000000000000000000"], 0x10}}, 0x0) 08:07:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0xff, 0x1}, 0x20) 08:07:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3, 0x4, 0xffffffffffffffff, 0x0, [0x2e]}, 0x3c) 08:07:26 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:26 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1) 08:07:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800004e20, 0x400007, @empty, 0x7}, 0xff37) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0xfffffffffffffe15}}, 0x0) 08:07:26 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(r0, 0x0) 08:07:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000240)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) r2 = syz_open_pts(r0, 0x2) r3 = dup3(r2, r0, 0x0) write$P9_RLOCK(r3, &(0x7f00000001c0)={0xfffffffffffffc64}, 0x2) 08:07:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmmsg(r0, &(0x7f0000008a80), 0x400000000000328, 0x0) 08:07:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) 08:07:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = dup(r0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) 08:07:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xa, 0x7fffffff, 0x2, 0x10, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0xa, 0x9, 0x238, 0x0, "9e7b3138850a2106c9c10fd13ae91e15e3b27f7a9f58807de07a6ff6c6f8bc9d0747ceb7cea07b1ab8462d01cc6c7b17b7a1b0866bb261a14d5760bf237c9cf3410558766d5f3c"}, @sadb_lifetime={0x4, 0x2, 0xc7, 0x8, 0x9f0, 0x5}]}, 0x80}}, 0x4810) ptrace(0x8410, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="25000300f2652393ddff0000"], 0x10}}, 0x0) 08:07:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x1000000000, 0x261c41eb}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 08:07:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x7, 0x4) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 08:07:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30100000, 0x0, 0x0, 0x0, &(0x7f0000000380)) 08:07:27 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) dup3(r0, r1, 0x0) 08:07:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, 0x0, 0x0) 08:07:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) 08:07:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 08:07:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) 08:07:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000200)={0x0, r2+10000000}, 0x0, 0x0) 08:07:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:27 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x2000000000000000) 08:07:27 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:27 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, &(0x7f0000000080), r2, &(0x7f00000000c0)=0xfffffffffffffffd, 0xe000000, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x5, 0x2, 0x0, 0x200000}, 0x10}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000040)={0x40, 0x101, 0x7dca}) r5 = geteuid() fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setfsuid(r8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setfsuid(r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40046602, &(0x7f0000000240)=0x400) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r15, 0x107, 0xd, 0x0, 0x0) fstat(r15, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000240)=0x400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) r19 = getgid() lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a279", @ANYRESDEC=r20]) write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)={0x618, 0x0, 0x6, [{{0x6, 0x3, 0x6, 0x2, 0x38e7, 0x0, {0x2, 0x9, 0x100000001, 0x2, 0x3, 0x80, 0xffff, 0x4, 0x40, 0x9, 0x7f, r5, 0xee00, 0x8001, 0x8}}, {0x6, 0x5, 0x12, 0x7fff, '/dev/loop-control\x00'}}, {{0x5, 0x2, 0x2, 0x7, 0x89af, 0x401, {0x3, 0x0, 0x1, 0x80000001, 0x3, 0x7, 0x80000000, 0x0, 0xfffffffffffffffd, 0x94, 0x4000, r6, r7, 0x9, 0xa3dd}}, {0x6, 0xc0c6, 0x12, 0xffffffff, '/dev/loop-control\x00'}}, {{0x2, 0x3, 0x6, 0x6, 0x4, 0x3, {0x4, 0x3, 0x7, 0xffff, 0x100, 0x0, 0x8507, 0x3, 0x7fff, 0xc79, 0x4, r8, 0xffffffffffffffff, 0x2, 0xfff}}, {0x5, 0x10001, 0x6, 0x5, 'eth1$\x89'}}, {{0x5, 0x1, 0x7, 0x4, 0x8, 0x40, {0x1, 0x3c1, 0x10000, 0x4, 0x1, 0x6, 0x8000, 0x5, 0x3, 0xdc, 0x0, r9, r11, 0x100000000, 0x9}}, {0x2, 0x3, 0x12, 0x9, '/dev/loop-control\x00'}}, {{0x3, 0x1, 0x3, 0x1, 0x80, 0x5, {0x0, 0x7fff, 0xff, 0x717, 0x6, 0x2, 0x8, 0x2a1, 0x1, 0x9, 0x80000001, 0x0, r12, 0x2, 0x9}}, {0x0, 0x999, 0x12, 0x80000000, '/dev/loop-control\x00'}}, {{0x1, 0x0, 0x4, 0x3, 0x6, 0xfff, {0x4, 0x81, 0x0, 0x9, 0x2bc, 0x101, 0x401, 0xfffffffffffffc19, 0x4, 0x9, 0x100000000000000, r13, r14, 0x7bc, 0x1}}, {0x2, 0x9, 0x12, 0x7, '/dev/loop-control\x00'}}, {{0x6, 0x1, 0x2000, 0x3, 0x3ff, 0x100, {0x1, 0x1, 0x8001, 0x800, 0x9, 0x1800000000, 0xfffffffffffff801, 0x3, 0x0, 0x2, 0x7f, r16, r17, 0x0, 0x5}}, {0x3, 0xfffffffffffffffd, 0x1a, 0xf9, ']userloselfsystemmime_type'}}, {{0x4, 0x0, 0x3, 0x8000, 0x8000, 0x4361d47, {0x1, 0x4, 0x4f, 0x47, 0x2463, 0x6, 0x401, 0x4, 0x200000000, 0x5, 0x6, r18, r19, 0x2be1c000, 0x9}}, {0x6, 0x9, 0x1, 0x8, ':'}}, {{0x6, 0x3, 0x4, 0x1000, 0x3, 0x7fff, {0x5, 0x100000000, 0x6, 0x6, 0x833, 0x7, 0x0, 0x8, 0x6cb, 0x2, 0x9, 0xee00, r20, 0x7f, 0x9}}, {0x3, 0x1, 0x1, 0xd969, '\\'}}]}, 0x618) 08:07:27 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r0, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) [ 196.341869] audit: type=1400 audit(1568880448.037:34): avc: denied { getopt } for pid=14978 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 08:07:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r0, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) 08:07:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 08:07:28 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x2000000000000000) 08:07:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r0, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) 08:07:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv6_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0) 08:07:28 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x8, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x6, {0x6, 0x3c, 0x7, 0x81, 0x0, 0x7, 0x0, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0x78}}, 0x0) r1 = geteuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/access\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000240)=0x400) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000180)={0x8000, 0x3c, "07a7c77a41d1048ce8029efe145549c4455581bddffce075ba3356aaaf93ba6343ef848bdf3ae11952f48e210401abc287410c479bcb40d9218aff95"}) fchown(r0, r1, r2) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) 08:07:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 08:07:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x0, 0x0) 08:07:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x8d, &(0x7f0000000040)={&(0x7f0000000c40)={0x10, 0x0, 0x3, 0x5, 0x0, 0x0, {0x0, 0xf0ffffff00000000}, [@typed={0x8, 0x0, @fd}]}, 0x1c}}, 0x0) 08:07:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 08:07:29 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:29 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x84c41, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018800}, 0x8000) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x7, 0x3ff, 0x7, 0x9, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa, 0x8, 0x0, 0xcfc9}, @sadb_spirange={0x20000000000000e3, 0x10, 0x4cf, 0x4d4}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x48}}, 0x1e98da0eebf92c6f) 08:07:29 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 08:07:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') sendfile(r0, r1, 0x0, 0x80000000000008) 08:07:29 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x52b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 08:07:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, &(0x7f0000000200)={0x0, r4+10000000}, 0x0, 0x0) [ 197.870908] input: syz1 as /devices/virtual/input/input45 08:07:29 executing program 0: 08:07:29 executing program 0: 08:07:29 executing program 5: 08:07:29 executing program 5: 08:07:29 executing program 5: [ 197.929630] input: syz1 as /devices/virtual/input/input46 08:07:30 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:30 executing program 3: ustat(0xa230, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r1, 0x800, 0x5ad, &(0x7f0000000100)=""/4, &(0x7f0000000140)=0x4) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) r3 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@generic={0x0, 0x658e}) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000040)="dcfc1dde7290a6aa4f40c5e4a621f2a6fd038e160847173506e6daf3976844972c9fc8022dca28b29adc555b8a9e678259b11cb89c748415d3a679bee701f5f198231dd903731eb3f1516f80b29f8cd9dc63f612049b00cc4472dca1bdc880128c79e769f3dea7937d5b3e0deecadf8b987544f57d0f") pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000280)) 08:07:30 executing program 5: 08:07:30 executing program 0: 08:07:30 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:30 executing program 0: 08:07:30 executing program 2: 08:07:30 executing program 5: 08:07:30 executing program 0: 08:07:30 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:30 executing program 5: 08:07:30 executing program 0: 08:07:30 executing program 5: 08:07:31 executing program 3: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009808d0000000000e3ff000000f74bf354dc350afe97a89917106afe2283bcea98383d39fa1728efe33e"], 0x393}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x9, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 08:07:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:31 executing program 5: 08:07:31 executing program 2: 08:07:31 executing program 0: 08:07:31 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:31 executing program 5: 08:07:31 executing program 2: 08:07:31 executing program 0: 08:07:31 executing program 5: 08:07:31 executing program 5: 08:07:31 executing program 5: 08:07:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x384, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x12}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x20, @loopback, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xd}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x923}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff8000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffe1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x206100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x586}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4}, 0xc410) 08:07:32 executing program 5: 08:07:32 executing program 0: 08:07:32 executing program 2: 08:07:32 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:32 executing program 2: 08:07:32 executing program 5: 08:07:32 executing program 0: 08:07:32 executing program 5: 08:07:32 executing program 5: 08:07:32 executing program 5: 08:07:32 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0xfffffffffffffffe}, 0x10}}, 0x0) 08:07:32 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:32 executing program 2: 08:07:32 executing program 5: 08:07:32 executing program 0: 08:07:32 executing program 2: 08:07:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:32 executing program 0: 08:07:32 executing program 5: 08:07:32 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:32 executing program 5: 08:07:32 executing program 5: 08:07:33 executing program 2: 08:07:33 executing program 0: 08:07:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) 08:07:33 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:33 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0x3, 0x7, 0x807, 0x0, 0x5}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/2, 0xbc) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000140)=""/76) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffff8, 0x1, 0x3, 0xffffffffffffffff}) flock(r4, 0x8) fchdir(r4) 08:07:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:33 executing program 2: 08:07:33 executing program 0: 08:07:33 executing program 5: 08:07:33 executing program 2: 08:07:33 executing program 0: 08:07:33 executing program 5: 08:07:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:33 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:33 executing program 2: 08:07:33 executing program 5: 08:07:33 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x97da, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), 0x4) ioctl$TCSETXW(r2, 0x5435, &(0x7f00000000c0)={0x2fba96ef, 0x9, [0x2, 0x20, 0x9, 0x1cf, 0x9], 0x20}) prctl$PR_SET_ENDIAN(0x14, 0x0) 08:07:33 executing program 0: 08:07:33 executing program 5: 08:07:33 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:33 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:33 executing program 2: 08:07:33 executing program 0: 08:07:33 executing program 2: 08:07:33 executing program 0: 08:07:33 executing program 5: 08:07:33 executing program 5: 08:07:33 executing program 5: 08:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x6, 0x4) 08:07:34 executing program 5: 08:07:34 executing program 0: 08:07:34 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:34 executing program 2: 08:07:34 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:34 executing program 2: 08:07:34 executing program 0: 08:07:34 executing program 5: 08:07:34 executing program 2: 08:07:34 executing program 0: 08:07:34 executing program 5: 08:07:34 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x10}}, 0x0) 08:07:34 executing program 5: 08:07:34 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:34 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:34 executing program 2: 08:07:34 executing program 0: 08:07:34 executing program 2: 08:07:34 executing program 0: 08:07:34 executing program 2: 08:07:34 executing program 5: 08:07:34 executing program 0: 08:07:34 executing program 5: 08:07:35 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:35 executing program 3: setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02210009020000000000004327bdfe77"], 0x10}}, 0x0) 08:07:35 executing program 0: 08:07:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 2: 08:07:35 executing program 5: 08:07:35 executing program 0: 08:07:35 executing program 5: 08:07:35 executing program 2: 08:07:35 executing program 0: 08:07:35 executing program 5: 08:07:35 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:35 executing program 2: 08:07:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:35 executing program 0: 08:07:35 executing program 2: 08:07:35 executing program 5: 08:07:35 executing program 0: 08:07:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:35 executing program 5: 08:07:35 executing program 0: 08:07:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 0: 08:07:35 executing program 5: 08:07:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000ec2f28c7ac90977f80731ff201b61d9f0bc5f00cb175f79b790f0058b8bcbd16da73a625cce655138a2545ec00f0a0bc05712f148b65921856de31f9a74e9898667faa78c0d3a58d9be1cd05de1edc1f406d14e63aecd4d5c9f7e2db34664fd1158a23e4f98b"], 0x10}}, 0x0) 08:07:35 executing program 5: 08:07:35 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:35 executing program 2: 08:07:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00H\xba4HU2\xfem\xe1\x7f\x84\xe1\x96\xa0[\xf2\x12\xb4.C\xf2){\x98\x01`4[\xb2\xc46=\xd7&\xfc\x88\xd2\xa9\x04K5B\xb7\x19\xec\xbe\xcbs\xc9\x10\xdb8L\xea#\x0e12\xe5F\xe4\x9d,\x84i0\xc9S\f\xa7\xe6\xa9=\xc1\xea\x99\xe6\x87\x16\xac\xae\xa3\xeb\x16T\xa5\x85\x9d\xbc|\xac\xf0\xb8\x16\x9b\xa7\xcd\xc0[>\xd1\xb0\x83W\xbab\x83\xcbsJ\xe9\x00\x00\x00\x00\x00\x00\x00\x02\xb3\xac\xf2\xb4k7\xd9\x9en\x03\xef\x14\xba\xd4\xb3j\x1f\x11L\x86\xdbI|\xfb\xdb\xf1\x97:\x0e\xb6AY\xf6z\x8f\xcf\xce\'\x8d', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x261c41eb}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 08:07:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20b, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000010d) r2 = dup2(r0, r1) open$dir(&(0x7f0000000380)='./file0\x00', 0x841, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x23c}}, 0x0) 08:07:35 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) clock_gettime(0x0, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:07:35 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:35 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x98, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8eba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff81}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r3, &(0x7f0000000700), 0x31f, 0x10400003) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000800000000000"], 0x10}}, 0x48a8) 08:07:35 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) truncate(&(0x7f0000000340)='./bus\x00', 0x0) 08:07:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x20b, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000010d) r2 = dup2(r0, r1) open$dir(&(0x7f0000000380)='./file0\x00', 0x841, 0x0) clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x23c}}, 0x0) 08:07:35 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6567f1d42d98bc6e02075d33020000000000000000000000b3639ce4fcf66bfe444982ca413fff90510ec7382fa2bd434b85a56175fd8b6a184f503d11f18ba56cbb7292fe9ef0d3"], 0x10}}, 0x0) 08:07:36 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 0: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:36 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0xfffffffffffffef5}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000240)=0x400) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000340)={{0x2, 0x4e21, @loopback}, {0x306, @broadcast}, 0x30, {0x2, 0x4e21, @multicast2}, 'batadv0\x00'}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 08:07:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:36 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/82, &(0x7f00000000c0)=0x52) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x9, 0x2000000000000026}, 0x10}}, 0x0) 08:07:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="cb000000000000000500000000000000020000000600050000000000000000000500000000000000010000800000000001000000010000000000000000000000000000000000000010000000000000000000000000000000070000000000000009000000000000000800"/144]) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$RTC_UIE_OFF(r2, 0x7004) 08:07:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x1, 0x3, 0x2}, 0x3a2}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) sendfile(r0, r1, &(0x7f0000000040), 0x5) 08:07:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x12, 0x8000, 0x8, 0x20000000000001dc, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x0, 0x15, 0x4e21}, @sadb_x_policy={0x0, 0x12, 0x3, 0x2, 0x0, 0x6e6bb7, 0x100, {0x0, 0x84, 0xc36, 0x7f, 0x0, 0x9, 0x0, @in6=@remote, @in6=@mcast2}}, @sadb_x_nat_t_type={0x0, 0x14, 0x9fa}]}, 0x10}}, 0x0) 08:07:38 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0xffffffffffffffb2}}, 0x20000000) 08:07:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:38 executing program 3: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) 08:07:38 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 5: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:38 executing program 0: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 5: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:38 executing program 5: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:38 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:38 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 5: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:39 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:39 executing program 5: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:39 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x12) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0xa, 0x1, 0x8001, 0x19, "51faa18b83b01ce96827f127dbb0d0072b44823e1688bfc9db"}, 0x25) 08:07:39 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:39 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x4810) 08:07:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x13, 0x9, 0x3, 0x28, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x11, 0x18, 0x37, 0x1, 0x7a, "228c55fded111e418a3e3fa29185ea66470f19907a8ae9c843e824d26e731fb40aec67c80fd7a34462d553004553e7df23f7e90c0680cd6d3631f6a5de338e96c1715cb96d7e44d4f8b7bf6d02c6c93c99aa6eb828ce57fa991e5f9af4135ac56aa46cb04a469108fde6c717ec4118c854281c7d2e4d546030b2"}, @sadb_ident={0x2, 0x0, 0x10001, 0x0, 0x8}, @sadb_x_nat_t_port={0x245, 0xda441fd43d26752b, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x3, 0x4e23}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x0, 0x2, {0x6, 0x818fee207be6405c, 0x9, 0x8, 0x0, 0x80000000, 0x0, @in6=@dev={0xfe, 0x80, [], 0x18}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x1, 0x0, 0x6e6bbf, 0xffffffffffffffff, {0x6, 0xff, 0x6, 0xd400000000000000, 0x0, 0x5, 0x0, @in=@remote, @in=@empty}}]}, 0x140}}, 0xf6dd711ed06fee26) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x40000, 0x8) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x1, 0x100000000, 0x3b4, 0x80000000, 0x1, "13b0f4aa2a3b8a38c077aef7ccd18f43b20d7a", 0x3, 0x4}) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0xffff, 0x80, 0x3}) 08:07:40 executing program 2: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009808d0000000000e3ff000000f74bf354dc350afe97a89917106afe2283bcea98383d39fa1728efe33e"], 0x393}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x9, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 08:07:40 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:40 executing program 5: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009808d0000000000e3ff000000f74bf354dc350afe97a89917106afe2283bcea98383d39fa1728efe33e"], 0x393}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x9, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 08:07:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x4810) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x44890) lseek(r0, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) pread64(r0, &(0x7f0000000040)=""/16, 0x10, 0x0) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x44890) lseek(r0, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) pread64(r0, &(0x7f0000000040)=""/16, 0x10, 0x0) 08:07:41 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:41 executing program 5: ustat(0xa230, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r1, 0x800, 0x5ad, &(0x7f0000000100)=""/4, &(0x7f0000000140)=0x4) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) r3 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000200)=@generic={0x0, 0x658e}) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000040)="dcfc1dde7290a6aa4f40c5e4a621f2a6fd038e160847173506e6daf3976844972c9fc8022dca28b29adc555b8a9e678259b11cb89c748415d3a679bee701f5f198231dd903731eb3f1516f80b29f8cd9dc63f612049b00cc4472dca1bdc880128c79e769f3dea7937d5b3e0deecadf8b987544f57d0f") pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000280)) 08:07:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x7, 0x6, 0x10000, 0x200}, @sadb_x_nat_t_type={0x1, 0x14, 0xa90}, @sadb_address={0x3, 0x6, 0x3c, 0x60, 0x0, @in={0x2, 0x4e21, @rand_addr=0xffff}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @loopback}, 0xfffffffffffff000}, @in={0x2, 0x4e24, @empty}}, @sadb_ident={0x2, 0xb, 0xd01, 0x0, 0x3}]}, 0x98}}, 0x0) 08:07:41 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:42 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x4810) 08:07:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:42 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xe, 0x4, 0x6, 0xa, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x80, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x6, @local, 0xffffffffffffd9e3}}]}, 0x50}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:42 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 0: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x4810) 08:07:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:42 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0xfffffffffffffdf9}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) r2 = dup2(r1, r0) ioctl$PPPIOCGIDLE(r2, 0x8008743f, &(0x7f0000000080)) 08:07:43 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xe, 0x4, 0x6, 0xa, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x80, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x6, @local, 0xffffffffffffd9e3}}]}, 0x50}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8000005, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3}, 0xfffffffffffffd37}}, 0xe97956c602fc4798) 08:07:43 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x4810) 08:07:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:43 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6003, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6fdc26d38f66c41e6169e26503f1c783", 0x10) socket$key(0xf, 0x3, 0x2) 08:07:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02060009020020008000000000000000"], 0xffffffffffffff67}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x4a, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, {{0x2, 0x4e23, @loopback}}}, 0x104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 08:07:43 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0x0, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:44 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x0, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 3: prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) getsockopt$inet_mreq(r1, 0x0, 0x35, &(0x7f0000000040)={@multicast1, @dev}, &(0x7f0000000080)=0x8) 08:07:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0) memfd_create(&(0x7f0000000180)='iC;`\xb6p+\x10', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200)=0x2, 0x4) dup3(r0, r1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) 08:07:44 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x0, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x1000}, 0x10}}, 0xaeaa39a257235933) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02119b092700000029bd7000ffdbdf25040004aa6b67e2860d5579e4f537c200ffffffff00080000000000005223000000000000ff010000000000000500070032c000000a004e20fffffffdfe8000000000000000000000000000bbff0700000000000002000100000004d20203de030000000002001e00c80d0000090000000000000005001a00aa3776222b9f5dfba1eb67eeef30c30bac1414120000000000000000000000001a00671802000b000000000006000000000000000b0018000909500024bd7c85c638c55f737173362cbe754fb4822d62ae109cd06d2d75c0d6a57d3b7344947c4cb948de1a4f3da28e199be3d5c026396ab58b1fd16ebfc8b355b13ca9a7e2fe94d638a5d798c34d0a16afb9050019000000000002004e2200000000000000000000000002004e21ffffffff88a5dfab1278b9bb485079b20000000000000000010016004e220000"], 0x138}}, 0x1f7edfda31379cba) 08:07:44 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x0, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x0, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000000008e17a712f1b0007c4bded2bf3379bef9cc307615a0b1442486138f6f8ed814013cab738ad74faeafb6f8284cba6e39cf94be6001ce4fdb9af406861436c7193789f8e69d57178d87847ed59e14aa7e1bf9c568b3d9e8737f45ff17b69d24052b189771e8a245fa868cb154320f44183d3395bfc06b267f0db522d34effdf45cc69362866dafab5ae8995735eb1d30a54b4f707a941d"], 0x10}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)='fuseblk\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="2c4a726f75705f69643dcc47398b17962b5eeea414dffb000cf71a5d9214dcde3814021d1db876bbdaa3983de173bedcd182b12e92e7e1c42bb803ca4da55de155165c9ca0fef3a694aaa8253e8effb9a7a279", @ANYRESDEC=r3]) write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x6, {0xfffffffffffffffb, 0x8, 0x0, {0x4, 0x100, 0x8, 0x2, 0x7, 0xffffffff7fffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x5, 0x9, r2, r3, 0x286de0980000, 0xce}}}, 0x78) 08:07:45 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:45 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:46 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009080000000000000000000000020001005100000004c1db04010000000400020091920000ff0f0000000000005c95b8e61f62562c1a0400000000a92f9cd0db7c6b1226d3b03b1c0000000600000000000000cc97ea72c3c97fc5891cd571d922349b1737fe1b6a4bbd5bba0e10915c4f1930530a5d00000000010000009695d1d0aaa0962164eed404586b2d41a6468ec110f52ab2623287efee93013e04db2bfcb1e1127c7b3f3845227ac51349"], 0x40}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) epoll_wait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0x3) 08:07:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:46 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:47 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002d80)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000002dc0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r6, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d0073bc00"/20, @ANYRES32=r12, @ANYBLOB="0000000000000c0000001000099a57f06007848b74202b8273f92d2badc9e81b687a1990c35cab5063bfebf6bee8691ecc3026affc62485896ba4ab4e327674fe184ff59459f0aa451d8d7c6036168f990d46311c2cc8894d3745bf0a33393b672d14c2991b87bbab97b2af0ddecb8f9c707966e97859d2c99f8ef6053"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002e00)={'team0\x00', r12}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d000000000000000000000000000000fbc667ceff67710d642c8d25736ce006acf450c19996ab19bab26e841b7d", @ANYRES32=r16, @ANYBLOB="0000000000000c0000001000"], 0x24}}, 0x0) r17 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r17, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r17, &(0x7f0000002e40)={0x11, 0x0, 0x0}, &(0x7f0000002e80)=0x14) r19 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r19, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000003800)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000003900)=0xe8) r21 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r21, 0x107, 0xd, 0x0, 0x0) getsockname$packet(r21, &(0x7f0000003940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003980)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000039c0)={@initdev, @broadcast, 0x0}, &(0x7f0000003a00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003b00)={0x0, @remote, @multicast1}, &(0x7f0000003b40)=0xc) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r27, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r28 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r28, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000003b80)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000003c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003d40)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003e40)=0xe8) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket(0x11, 0x800000003, 0x0) bind(r32, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r31, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r33, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r34 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r34, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r34, &(0x7f0000003ec0)={0x11, 0x0, 0x0}, &(0x7f0000003f00)=0x14) r36 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r36, 0x107, 0xd, 0x0, 0x0) accept4$packet(r36, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003f80)=0x14, 0x80800) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r38, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r38, 0x29, 0x23, &(0x7f0000003fc0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000040c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004140)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000004240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004280)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000004380)=0xe8) r42 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r42, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r42, 0x8933, &(0x7f00000043c0)={'lo\x00', 0x0}) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket(0x11, 0x800000003, 0x0) bind(r45, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r45, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r44, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r46, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004400)={{{@in6=@ipv4, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000004500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004540)={0x9e8, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r9}, {0x234, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc15b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x138, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r29}, {0x1ac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x8, 0x7, 0x3}, {0x3, 0x380000000000000, 0xffffffff, 0x9}, {0x9, 0x0, 0x6, 0xffffffffffffff33}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r35}, {0x134, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x96}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r41}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}]}}, {{0x8, 0x1, r46}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x70}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xdfd}}}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:47 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x0, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sysinfo(&(0x7f0000000240)=""/4096) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200000000200000003f0000"], 0x10}}, 0x0) 08:07:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000240)=""/236) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x4000) 08:07:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:48 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002d80)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000002dc0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r6, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d0073bc00"/20, @ANYRES32=r12, @ANYBLOB="0000000000000c0000001000099a57f06007848b74202b8273f92d2badc9e81b687a1990c35cab5063bfebf6bee8691ecc3026affc62485896ba4ab4e327674fe184ff59459f0aa451d8d7c6036168f990d46311c2cc8894d3745bf0a33393b672d14c2991b87bbab97b2af0ddecb8f9c707966e97859d2c99f8ef6053"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002e00)={'team0\x00', r12}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d000000000000000000000000000000fbc667ceff67710d642c8d25736ce006acf450c19996ab19bab26e841b7d", @ANYRES32=r16, @ANYBLOB="0000000000000c0000001000"], 0x24}}, 0x0) r17 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r17, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r17, &(0x7f0000002e40)={0x11, 0x0, 0x0}, &(0x7f0000002e80)=0x14) r19 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r19, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000003800)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000003900)=0xe8) r21 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r21, 0x107, 0xd, 0x0, 0x0) getsockname$packet(r21, &(0x7f0000003940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003980)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000039c0)={@initdev, @broadcast, 0x0}, &(0x7f0000003a00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003b00)={0x0, @remote, @multicast1}, &(0x7f0000003b40)=0xc) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r27, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r28 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r28, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000003b80)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000003c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003d40)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003e40)=0xe8) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket(0x11, 0x800000003, 0x0) bind(r32, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r31, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r33, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r34 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r34, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r34, &(0x7f0000003ec0)={0x11, 0x0, 0x0}, &(0x7f0000003f00)=0x14) r36 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r36, 0x107, 0xd, 0x0, 0x0) accept4$packet(r36, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003f80)=0x14, 0x80800) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r38, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r38, 0x29, 0x23, &(0x7f0000003fc0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000040c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004140)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000004240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004280)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000004380)=0xe8) r42 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r42, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r42, 0x8933, &(0x7f00000043c0)={'lo\x00', 0x0}) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket(0x11, 0x800000003, 0x0) bind(r45, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r45, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r44, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r46, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004400)={{{@in6=@ipv4, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000004500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004540)={0x9e8, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r9}, {0x234, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc15b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x138, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r29}, {0x1ac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x8, 0x7, 0x3}, {0x3, 0x380000000000000, 0xffffffff, 0x9}, {0x9, 0x0, 0x6, 0xffffffffffffff33}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r35}, {0x134, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x96}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r41}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}]}}, {{0x8, 0x1, r46}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x70}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xdfd}}}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002d80)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000002dc0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r6, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d0073bc00"/20, @ANYRES32=r12, @ANYBLOB="0000000000000c0000001000099a57f06007848b74202b8273f92d2badc9e81b687a1990c35cab5063bfebf6bee8691ecc3026affc62485896ba4ab4e327674fe184ff59459f0aa451d8d7c6036168f990d46311c2cc8894d3745bf0a33393b672d14c2991b87bbab97b2af0ddecb8f9c707966e97859d2c99f8ef6053"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002e00)={'team0\x00', r12}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d000000000000000000000000000000fbc667ceff67710d642c8d25736ce006acf450c19996ab19bab26e841b7d", @ANYRES32=r16, @ANYBLOB="0000000000000c0000001000"], 0x24}}, 0x0) r17 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r17, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r17, &(0x7f0000002e40)={0x11, 0x0, 0x0}, &(0x7f0000002e80)=0x14) r19 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r19, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000003800)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000003900)=0xe8) r21 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r21, 0x107, 0xd, 0x0, 0x0) getsockname$packet(r21, &(0x7f0000003940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003980)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000039c0)={@initdev, @broadcast, 0x0}, &(0x7f0000003a00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003b00)={0x0, @remote, @multicast1}, &(0x7f0000003b40)=0xc) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket(0x11, 0x800000003, 0x0) bind(r26, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r26, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r25, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r27, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r28 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r28, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000003b80)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000003c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003d40)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003e40)=0xe8) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = socket(0x11, 0x800000003, 0x0) bind(r32, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r32, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r31, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r33, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) r34 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r34, 0x107, 0xd, 0x0, 0x0) getpeername$packet(r34, &(0x7f0000003ec0)={0x11, 0x0, 0x0}, &(0x7f0000003f00)=0x14) r36 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r36, 0x107, 0xd, 0x0, 0x0) accept4$packet(r36, &(0x7f0000003f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003f80)=0x14, 0x80800) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r38, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r38, 0x29, 0x23, &(0x7f0000003fc0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000040c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004140)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000004240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004280)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000004380)=0xe8) r42 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r42, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r42, 0x8933, &(0x7f00000043c0)={'lo\x00', 0x0}) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket(0x11, 0x800000003, 0x0) bind(r45, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r45, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r44, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x559ed5190dc7bc73, 0x0, 0x0, {0x0, r46, {}, {0x0, 0xc}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004400)={{{@in6=@ipv4, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000004500)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004540)={0x9e8, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x128, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r9}, {0x234, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc15b}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x138, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r29}, {0x1ac, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0x8, 0x7, 0x3}, {0x3, 0x380000000000000, 0xffffffff, 0x9}, {0x9, 0x0, 0x6, 0xffffffffffffff33}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r33}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r35}, {0x134, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r37}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x96}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r41}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r43}}, {0x8}}}]}}, {{0x8, 0x1, r46}, {0x170, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x70}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xdfd}}}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 08:07:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xa0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 3: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x4, 0x5}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020740000000000000000000000000009773376b6a9a3b06c878b12d3fd72ad1d37910ca5c3199f3f2a0d0b7d082f9b01afa4b18357f12739c23f4d8398b114324fc4e7e3df2dec35736da87b9b53a412a45e1c639e09dfe6ae38106beaf439df93307ef8f8b5f3c7c41251603adf903677c74bbe3075462d45642b0cbd0bd83af3890f38ff350d9b5c2e80c5cbc6530b289c3fd995bb6c4c75a4299e03bed0a3d194faa0622cfe492f51a971eaad67b3bf274d62b1ae6080c66bb1adba6ff879ecfc985b741d0cf7c26c555155fae9f6e14b4be30ac50c40cb1aa8f1d6756f8807f0ae3a8aec212e421760f8f2010b2"], 0x10}}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) 08:07:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xa0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xa0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xa0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:49 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:50 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x0, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x0, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090200046b000000000000002924fc3da808e225cfccba1d63ed2a6feda0a18c0f540560c5eb757984c8a23e5c05b8a73fe16f66edd8327337cc55b9853b272417f47015e569a6c1f53e3feed1a18e1e42f009a6819ea0c8288f33ffbb9ca3524e78ee2c1123feba1e7fbedcf72f5c946b15b9d5866adaf5daaeb2b23ff2e42fa8bfb53a7128ed255cb2a637deb8e6323b42e535a785abbcc7af4d6ce1e07328a2a4929d6f047911398ec19ddd8082379c"], 0x10}}, 0x0) 08:07:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x0, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x0, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x18d0c0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = dup(r2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x100, 0x793, 0x101}) 08:07:51 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2010002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @rand_addr=0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x84010) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x1}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x9}}, 0x10) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02d7c0ff50f43c9983c5479300000000"], 0x10}}, 0x0) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = dup3(r3, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$TCSETX(r2, 0x5433, &(0x7f0000000080)={0x216, 0x100000001, [0x4794, 0x8, 0x200, 0x11f5e000], 0x13d}) unshare(0x400) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000902020000000000000000000009da5e61a67ab707dd0552a49fe4589a21c653b0e42ce31fe5d0dae230ac"], 0x10}}, 0x0) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x18d0c0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = dup(r2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x100, 0x793, 0x101}) 08:07:51 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @broadcast}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) 08:07:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) r1 = socket$key(0xf, 0x3, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x18d0c0, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = dup(r2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r4, 0x0, 0x100, 0x793, 0x101}) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x0, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:52 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0xc0000) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 08:07:52 executing program 3: socket$netlink(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009020000000000000000000000f66807dfbfa2591618dfa0400866f6387b29ce2758bfd1f5897617859cc3afb466abfde000443acee48a98e25bdbc84820ceb9b8612b42e562081a2a40b484837a2d1febd512e7a0b206af42aeeec5ce47664df1db7f66fd471506a257e2729f9f942b0aaf603aac79c13b62eac96cd334f397502a3e3bf2dfb6f1cd65b298e7dcd2ba9edbed7035b25c28e6a396f7069f0ae100c3164c"], 0x10}}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setfsuid(r2) r3 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x7, {0x10, 0x2, 0x8}, 0x0, r2, r3, 0x1197, 0x2, 0x6000, 0x8000, 0x5, 0x3, 0x7f, 0x0, 0x5, 0x7, 0x23, 0x4, 0x7, 0x8, 0x5}}, 0xa0) 08:07:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xfffffffffffffd93}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x44d40, 0x0) 08:07:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x11, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xa5ba2a3b62e5b7e5, 0x5, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@multicast1, 0x5, 0x10, 0x36}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_ident={0x2, 0x1, 0x19a2529f, 0x0, 0x3ff}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@rand_addr=0x87, 0x5, 0x10}]}, 0x88}}, 0x0) 08:07:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 3: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, [], [{0x1, 0x5, 0x9, 0x1ff, 0x50, 0x6}, {0xfffffffffffffc01, 0x4, 0x0, 0x1, 0xda, 0x26}], [[], []]}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 08:07:53 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 08:07:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 08:07:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}], 0xca, 0x0, &(0x7f0000000240)="5070197d8d63b36d87bfc360dc994448ecf411c7fa3c861e43995d8326a85bc3330808264d48f6d50e8a9d588076a0f667ad6240585baa887f1f614db254f77ef403f0cfdda6ee88c25898993ed131a8367a1609ac63438e668ccaa840098eda02e45683e013341a12319429768124cab37a0cb1479c31115a3897eaeb99d2e8b00c5f2d6896acb2dc1fb42ff96783a9ad8cc8fb2a56e7258e4d93a5189a2d7ce439fe08fe480f031353f883331ccc74ee8ce40ac89bfebe4984edecd1038bfdefe852cd79a5dddd012a"}) r1 = socket$key(0xf, 0x3, 0x2) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207da09020000000000000000f22d70714dbf181507b27224c895bc96a15cd1a1f323a4ee1829042f31808f3da9730efc6af6fa5cd8388df283c5b02df8e59d1059b3826fe8ca65ff720973408c204f112607dbcbe4bc0701b9f1f0f152142d0635649c1511c886246e9b99e04de9f881e33d046c4ad5a8c5ecdd014652a532e541bc88c3bf00"/144], 0x10}}, 0x0) 08:07:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x0, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x0, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x27, 0x0, 0x0, 0x0, [@sadb_key={0x14, 0x8, 0x4b0, 0x0, "ea9611a46a4eb92438729f34e6545708adfab84e0a9c0d1e53b1bbe1d152b6f464d39d99099fd121c44720bff629c6e313a5ad9ea9b495a375b737b968f191cc46c1985384eb9866a8858aba579da3450e9b46c71b71e0bc0ed665161a516317d6735d2300c31474c7bd7d065e0c4617b439333ef7387d551c495e2d750014941b2a9088e6c16e88dbd21235045ee7dde38975b2782e"}, @sadb_key={0x10, 0x9, 0x3c0, 0x0, "b1cdc8ea634d08f5b9f7edfb5ba3f1236c802a9ebcde52442b78fac6468c66f9d10149504e265fbe0cd1d43df2d51f3235cd8b3fb1c5563f75b87ea778f61095fc96f2bc00e77541ad14e68dc4093f152d5432552627a774d2f931d8a4081dd6486e625a35e6dc9ce7336f593e2b95e25333a9b32bc8c510"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0x138}}, 0x0) 08:07:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x0, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x0, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xb0, 0xfffffffffffffffe, 0x1, [{0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xb0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x20000, 0x0) flistxattr(r2, &(0x7f0000000140)=""/4, 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000ed45f8ba91c392f0e50a0400"], 0x10}}, 0x0) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='eth0system%self$\'vboxnet0\x00', 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000340)='+*ppp1^self\x00') keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r3, 0xe4, 0xf5}, 0x0, &(0x7f0000000340)="3f50b195a9069a69f4844d118660666d1b36a61123a1ff84b877c9a9384287fcea20fefbaf93c943b160ab7392943c0da5c5410e36df821e6fb0da0fbd0b7df1814904e64ee12130adf9300e141c6eb82ab03df815f5db331087df5a3a62a41c2f68a0e232958b8b13b86a119e830e27bc787cec34582c402a16112bc39a84e97e3fd35563f17ec229cc624937ce86f998b2949686b438ae7c7c56cea6835cddd82b439f2577472576b103921a15aed6cfb98c7a86db666a25103118ba348fe0adf2cd1228046f609dd553a236a6d72058e08c48d440da1e926ed3e67e2c95fc3b574700", &(0x7f0000000440)=""/245) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) ioctl(r0, 0x1, &(0x7f0000000240)="b8b7c6c6e5012fa23c32a2e48a061d8d7d537aba97db497da30e8d0ac6cfb5affc8970473334cfd085c6402eed565df923267190faffc8b91924e429b723ba4c352d4cd4285cb73032c797f2641ddb21d45ea90fb404f8c4469ea59cc03d18174f490ef8e8a161831b6e9a8440cdeed19ee633dfad0c37b1e1c391d88b5a88ea12d1ee773560b010ff6d4784a652074d7d7706d911fdde61916fe99550838ebd5426ae19e5089d70a07ff5fb2b565f3cc3c1758102fe56c5c25e376da7bc2a10d41417587a41c4284ca8c8b2872e35fc313fd9e8016ce251b1") 08:07:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x81}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2}, 0x10) preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x7ff, @remote, 0x80000001}, {0xa, 0x4e24, 0xfffffffffffffff7, @ipv4={[], [], @remote}, 0x90}, 0x8, [0x9, 0x1ff, 0xffffffff80000001, 0x200, 0x9, 0x7b692143, 0x1, 0x1]}, 0x5c) 08:07:55 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x2000, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x40000) 08:07:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0x0, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02070009020000002abd70000000000000001000000004d2000004d6000000000000140001000000000004000200000001000000000000000100000000000000060000000000000000000b00000000001aaf000000000000000004000000000008000a00000000006f00000000000000080000000000000000000100000004d5030098000000004000001700fff000000a004e2200000003fe880000000000000000000000000101030000000000000000001700322000000a004e220000001ffe80000000000000000000000000002504000000000000000000a5426c0d478705aa30fab9543956444619000000000002004e237f00000100000000000000000a004e2300000800fe8000000000000000000000000000bb3f000000000000931dc524d189070000000800000000007448d3a832d457580a9dfacd3629b70454b29ec9852956f7213128a6183e6e81fbd0d6a33be58fdd33411e6b4e720059170131e05bca212fde2745d50b54acecdc6e518dd1e45b79800d0c2dfcd78da9c36b0ed7eac4b7579dccc383675cf5b325573a34864a470e3d317dd4837e0e8ae68a35e68692c6ca1e40483c4a1bf361c7dd4df8b70ac0d14ba1cab46581d21986781e89a92184e8a29ea7529f8aab891e009abf2bd9882efd506467e3911030cd73f87ffeee0641a26fb127f097e87d2f7319df220172a08bdefbb2e9e2eecb6560439b1898607868eab22f4f48e1dcd7954764ac1f8467729dca1d3a3961baabdf91819832582069196f98e613ae136f322d17bb54aea27665c4a9a71e857c96dc34578aeb24dbd595a02c3943d6a2f35a3fe6319900fca0753ffdec7f02690d538500bafd470e7e3e5fa674fc8fe507319ff6bee1e29a75"], 0x81}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2}, 0x10) preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x7ff, @remote, 0x80000001}, {0xa, 0x4e24, 0xfffffffffffffff7, @ipv4={[], [], @remote}, 0x90}, 0x8, [0x9, 0x1ff, 0xffffffff80000001, 0x200, 0x9, 0x7b692143, 0x1, 0x1]}, 0x5c) 08:07:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:56 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) 08:07:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070074e3ee9863d7ea0000100000008575ddfffb51f11ed86618ad7ecd9e308bfc270b8b0c02000000a08c41ff2caa23459305ab3943a5603c95a4b4f426260905000000b8d2d63fbc000000002e68a55bedc54ec2d5ca25b69c193a3cb62d5c8fca3a774b27fcbc20d0bb4066ffb3710945713925656680177a47aacf480a1a03fdd859d8fb3d795a6d1fc9a684e5916d97df5cd993228caf2c00a4d878fcd000"/179], 0x10}}, 0x0) 08:07:56 executing program 2: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000240)=0x400) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003480)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000003580)=0xe8) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000240)=0x400) recvmsg(r1, &(0x7f0000003440)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/166, 0xa6}, {&(0x7f00000000c0)=""/48, 0x30}], 0x6, &(0x7f0000002440)=""/4096, 0x1000}, 0x10040) [ 225.370342] ================================================================== [ 225.377767] BUG: KASAN: use-after-free in disk_unblock_events+0x51/0x60 [ 225.384516] Read of size 8 at addr ffff8801a6905a60 by task blkid/18192 [ 225.391261] [ 225.392892] CPU: 0 PID: 18192 Comm: blkid Not tainted 4.9.141+ #23 [ 225.399203] ffff8801d95f76f8 ffffffff81b42e79 ffffea00069a4000 ffff8801a6905a60 [ 225.407314] 0000000000000000 ffff8801a6905a60 0000000000000000 ffff8801d95f7730 [ 225.415399] ffffffff815009b8 ffff8801a6905a60 0000000000000008 0000000000000000 [ 225.423480] Call Trace: [ 225.426066] [] dump_stack+0xc1/0x128 [ 225.431436] [] print_address_description+0x6c/0x234 [ 225.438114] [] kasan_report.cold.6+0x242/0x2fe [ 225.444327] [] ? disk_unblock_events+0x51/0x60 [ 225.450675] [] __asan_report_load8_noabort+0x14/0x20 [ 225.457419] [] disk_unblock_events+0x51/0x60 [ 225.463471] [] __blkdev_get+0x6b6/0xd60 [ 225.469087] [] ? __blkdev_put+0x840/0x840 [ 225.474990] [] ? fsnotify+0x114/0x1100 [ 225.480513] [] blkdev_get+0x2da/0x920 [ 225.485955] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 225.492695] [] ? bd_may_claim+0xd0/0xd0 [ 225.499179] [] ? bd_acquire+0x27/0x250 [ 225.504707] [] ? bd_acquire+0x88/0x250 [ 225.510223] [] ? _raw_spin_unlock+0x2c/0x50 [ 225.516173] [] blkdev_open+0x1a5/0x250 [ 225.521690] [] do_dentry_open+0x3ef/0xc90 [ 225.527476] [] ? blkdev_get_by_dev+0x70/0x70 [ 225.533523] [] vfs_open+0x11c/0x210 [ 225.538796] [] ? may_open.isra.20+0x14f/0x2a0 [ 225.544934] [] path_openat+0x542/0x2790 [ 225.550596] [] ? path_mountpoint+0x6c0/0x6c0 [ 225.556636] [] ? trace_hardirqs_on+0x10/0x10 [ 225.562751] [] ? expand_files.part.3+0x3a9/0x6d0 [ 225.569161] [] do_filp_open+0x197/0x270 [ 225.574891] [] ? may_open_dev+0xe0/0xe0 [ 225.580519] [] ? _raw_spin_unlock+0x2c/0x50 [ 225.586495] [] ? __alloc_fd+0x1d7/0x4a0 [ 225.592126] [] do_sys_open+0x30d/0x5c0 [ 225.597672] [] ? filp_open+0x70/0x70 [ 225.603077] [] ? up_read+0x1a/0x40 [ 225.608272] [] SyS_open+0x2d/0x40 [ 225.613390] [] ? do_sys_open+0x5c0/0x5c0 [ 225.619104] [] do_syscall_64+0x19f/0x550 [ 225.624828] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 225.631753] [ 225.633378] Allocated by task 18135: [ 225.637093] save_stack_trace+0x16/0x20 [ 225.641066] kasan_kmalloc.part.1+0x62/0xf0 [ 225.645387] kasan_kmalloc+0xaf/0xc0 [ 225.649096] kmem_cache_alloc_trace+0x117/0x2e0 [ 225.653768] alloc_disk_node+0x54/0x3a0 [ 225.657747] alloc_disk+0x18/0x20 [ 225.661197] loop_add+0x368/0x7a0 [ 225.664644] loop_probe+0x14f/0x180 [ 225.668270] kobj_lookup+0x223/0x410 [ 225.671980] get_gendisk+0x39/0x2d0 [ 225.675603] __blkdev_get+0x351/0xd60 [ 225.679399] blkdev_get+0x2da/0x920 [ 225.683022] blkdev_open+0x1a5/0x250 [ 225.686734] do_dentry_open+0x3ef/0xc90 [ 225.690706] vfs_open+0x11c/0x210 [ 225.694155] path_openat+0x542/0x2790 [ 225.697953] do_filp_open+0x197/0x270 [ 225.701751] do_sys_open+0x30d/0x5c0 [ 225.705461] compat_SyS_open+0x2a/0x40 [ 225.709354] do_fast_syscall_32+0x2f1/0xa10 [ 225.713674] entry_SYSENTER_compat+0x90/0xa2 [ 225.718088] 08:07:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) 08:07:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) [ 225.719721] Freed by task 18192: [ 225.723089] save_stack_trace+0x16/0x20 [ 225.727066] kasan_slab_free+0xac/0x190 [ 225.731043] kfree+0xfb/0x310 [ 225.734151] disk_release+0x259/0x330 [ 225.737956] device_release+0x7e/0x220 [ 225.741842] kobject_put+0x148/0x250 [ 225.745557] put_disk+0x23/0x30 [ 225.748839] __blkdev_get+0x616/0xd60 [ 225.752638] blkdev_get+0x2da/0x920 [ 225.756260] blkdev_open+0x1a5/0x250 [ 225.759979] do_dentry_open+0x3ef/0xc90 [ 225.763935] vfs_open+0x11c/0x210 [ 225.767375] path_openat+0x542/0x2790 [ 225.771161] do_filp_open+0x197/0x270 [ 225.774941] do_sys_open+0x30d/0x5c0 [ 225.778646] SyS_open+0x2d/0x40 [ 225.781916] do_syscall_64+0x19f/0x550 [ 225.785793] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 225.790871] [ 225.792477] The buggy address belongs to the object at ffff8801a6905500 [ 225.792477] which belongs to the cache kmalloc-2048 of size 2048 [ 225.805287] The buggy address is located 1376 bytes inside of [ 225.805287] 2048-byte region [ffff8801a6905500, ffff8801a6905d00) [ 225.817328] The buggy address belongs to the page: [ 225.822256] page:ffffea00069a4000 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 225.832444] flags: 0x4000000000004080(slab|head) [ 225.837175] page dumped because: kasan: bad access detected [ 225.842861] [ 225.844476] Memory state around the buggy address: [ 225.849390] ffff8801a6905900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.856729] ffff8801a6905980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.864071] >ffff8801a6905a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.871430] ^ [ 225.877909] ffff8801a6905a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.885251] ffff8801a6905b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.892588] ================================================================== [ 225.899926] Disabling lock debugging due to kernel taint [ 225.909987] Kernel panic - not syncing: panic_on_warn set ... [ 225.909987] [ 225.917383] CPU: 0 PID: 18192 Comm: blkid Tainted: G B 4.9.141+ #23 [ 225.924894] ffff8801d95f7658 ffffffff81b42e79 ffffffff82e37630 00000000ffffffff [ 225.932964] 0000000000000000 0000000000000000 0000000000000000 ffff8801d95f7718 [ 225.940975] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 225.949188] Call Trace: [ 225.951771] [] dump_stack+0xc1/0x128 [ 225.957118] [] panic+0x1bf/0x39f [ 225.962118] [] ? add_taint.cold.5+0x16/0x16 [ 225.968075] [] ? ___preempt_schedule+0x16/0x18 [ 225.974299] [] kasan_end_report+0x47/0x4f [ 225.980078] [] kasan_report.cold.6+0x76/0x2fe [ 225.986200] [] ? disk_unblock_events+0x51/0x60 [ 225.992416] [] __asan_report_load8_noabort+0x14/0x20 [ 225.999161] [] disk_unblock_events+0x51/0x60 [ 226.005218] [] __blkdev_get+0x6b6/0xd60 [ 226.010826] [] ? __blkdev_put+0x840/0x840 [ 226.016603] [] ? fsnotify+0x114/0x1100 [ 226.022118] [] blkdev_get+0x2da/0x920 [ 226.027551] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 226.034284] [] ? bd_may_claim+0xd0/0xd0 [ 226.039896] [] ? bd_acquire+0x27/0x250 [ 226.045417] [] ? bd_acquire+0x88/0x250 [ 226.050938] [] ? _raw_spin_unlock+0x2c/0x50 [ 226.056976] [] blkdev_open+0x1a5/0x250 [ 226.062502] [] do_dentry_open+0x3ef/0xc90 08:07:57 executing program 4: syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc6880450}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x2e0, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2ae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd51}]}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7902}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb29e}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4810) 08:07:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) r5 = dup3(r4, r1, 0xc0000) write$FUSE_DIRENT(r5, &(0x7f0000000040)={0xe0, 0xfffffffffffffffe, 0x1, [{0x2, 0x0, 0x12, 0xffffffff, '/dev/loop-control\x00'}, {0x0, 0x80, 0x11, 0x8001, '/dev/vga_arbiter\x00'}, {0x0, 0x0, 0x22, 0x1, 'posix_acl_accessmd5sumwlan1trusted'}, {0x0, 0x79, 0x12, 0x4, '/dev/loop-control\x00'}]}, 0xe0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) [ 226.068330] [] ? blkdev_get_by_dev+0x70/0x70 [ 226.074383] [] vfs_open+0x11c/0x210 [ 226.079656] [] ? may_open.isra.20+0x14f/0x2a0 [ 226.086762] [] path_openat+0x542/0x2790 [ 226.092387] [] ? path_mountpoint+0x6c0/0x6c0 [ 226.098442] [] ? trace_hardirqs_on+0x10/0x10 [ 226.104481] [] ? expand_files.part.3+0x3a9/0x6d0 [ 226.110866] [] do_filp_open+0x197/0x270 [ 226.116484] [] ? may_open_dev+0xe0/0xe0 [ 226.122099] [] ? _raw_spin_unlock+0x2c/0x50 [ 226.128052] [] ? __alloc_fd+0x1d7/0x4a0 [ 226.133672] [] do_sys_open+0x30d/0x5c0 [ 226.139213] [] ? filp_open+0x70/0x70 [ 226.144570] [] ? up_read+0x1a/0x40 [ 226.149742] [] SyS_open+0x2d/0x40 [ 226.154826] [] ? do_sys_open+0x5c0/0x5c0 [ 226.160520] [] do_syscall_64+0x19f/0x550 [ 226.166209] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 226.173866] Kernel Offset: disabled [ 226.177493] Rebooting in 86400 seconds..